From a19b46dad2c507cf8d23fedfe774ab6c60776947 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ville=20Skytt=C3=A4?= Date: Wed, 20 May 2009 21:29:35 +0000 Subject: [PATCH 01/33] Sync with F-10. --- .cvsignore | 2 +- sectool-0.9.2-fixing.patch | 1778 +++++++++++++++++++++++++++++++++ sectool-0.9.2-man_files.patch | 28 - sectool.spec | 56 +- sources | 2 +- 5 files changed, 1809 insertions(+), 57 deletions(-) create mode 100644 sectool-0.9.2-fixing.patch delete mode 100644 sectool-0.9.2-man_files.patch diff --git a/.cvsignore b/.cvsignore index 23f023b..0995550 100644 --- a/.cvsignore +++ b/.cvsignore @@ -1 +1 @@ -sectool-0.9.1.tar.bz2 +sectool-0.9.2.tar.bz2 diff --git a/sectool-0.9.2-fixing.patch b/sectool-0.9.2-fixing.patch new file mode 100644 index 0000000..e02dab8 --- /dev/null +++ b/sectool-0.9.2-fixing.patch @@ -0,0 +1,1778 @@ +diff --git a/po/fr.po b/po/fr.po +new file mode 100644 +index 0000000..92c0ec3 +--- /dev/null ++++ b/po/fr.po +@@ -0,0 +1,1670 @@ ++# French translation of SecTool. ++# Copyright (C) 2008 The SecTool copyright holder(s) ++# This file is distributed under the same license as the sectool package. ++# Corentin Perard 2008. ++# troubi , 2008. ++# ++# ++msgid "" ++msgstr "" ++"Project-Id-Version: sectool master\n" ++"Report-Msgid-Bugs-To: \n" ++"POT-Creation-Date: 2008-10-22 10:12+0200\n" ++"PO-Revision-Date: 2008-11-27 18:53+0100\n" ++"Last-Translator: Corentin Perard \n" ++"Language-Team: French \n" ++"MIME-Version: 1.0\n" ++"Content-Type: text/plain; charset=UTF-8\n" ++"Content-Transfer-Encoding: 8bit" ++ ++#: ../src/actions.py:45 ++#, python-format ++msgid "You need to be root to perform %s" ++msgstr "Vous devez être super-utilisateur pour effectuer %s" ++ ++#: ../src/actions.py:51 ++#, python-format ++msgid "Need a list of tests to do %s" ++msgstr "Requiert une liste de tests pour faire %s" ++ ++#: ../src/actions.py:56 ++#, python-format ++msgid "You need to have SELinux enabled to perform %s" ++msgstr "Vous devez avoir SELinux activé pour effectuer %s" ++ ++#: ../src/actions.py:114 ++msgid "base run class" ++msgstr "Classe d'exécution de base" ++ ++#: ../src/actions.py:169 ++#, python-format ++msgid "" ++"Test %s failed in a fatal way - returned %d. Stopping execution of the rest " ++"of the tests" ++msgstr "Le test %s a échoué de manière fatale - a retourné %d. Stoppe l'exécution du reste des tests" ++ ++#: ../src/actions.py:289 ++msgid "No matching tests to run" ++msgstr "Pas de tests correspondants à lancer" ++ ++#: ../src/actions.py:302 ++#, python-format ++msgid "Bad level specification - level must be between 1 and %d, got %d" ++msgstr "Mauvaise spécification de niveau - le niveau doit être compris entre 1 et %d, a reçu %d" ++ ++#: ../src/actions.py:332 ++#, python-format ++msgid "Could not send mail: retcode = %d" ++msgstr "N'a pas pu envoyer le mail: code de retour = %d" ++ ++#: ../src/actions.py:346 ++msgid "remove old test results" ++msgstr "Supprimer les anciens resultats de test" ++ ++#: ../src/actions.py:369 ++msgid "run test(s) at a certain level" ++msgstr "Lancer le(s) test(s) à un certain niveau" ++ ++#: ../src/actions.py:411 ++msgid "run test(s)" ++msgstr "Lancer le(s) test(s)" ++ ++#: ../src/actions.py:453 ++msgid "query info about test(s)" ++msgstr "Demander des infos sur le(s) test(s)" ++ ++#: ../src/actions.py:494 ++msgid "list tests" ++msgstr "Lister les tests" ++ ++#: ../src/actions.py:526 ++msgid "action defined in the config file" ++msgstr "Action définie dans le fichier de config" ++ ++#: ../src/actions.py:534 ++msgid "Please check if your config file contains a section 'ACTION'" ++msgstr "Veuillez vérifier si votre fichier de config contient une section 'ACTION'" ++ ++#: ../src/actions.py:593 ++msgid "Cannot use both include/exclude and test name in test list" ++msgstr "Ne peut pas utiliser à la fois inclure/exclure et le nom du test dans la liste de tests" ++ ++#: ../src/actions.py:619 ++msgid "refresh test data" ++msgstr "Raffraîchir les données du test" ++ ++#: ../src/guiOutput.py:54 ../src/guiOutput.py:199 ../src/output.py:139 ++msgid "Warning" ++msgstr "Attention" ++ ++#: ../src/guiOutput.py:55 ../src/guiOutput.py:202 ../src/output.py:142 ++msgid "Failure" ++msgstr "Echec" ++ ++#: ../src/guiOutput.py:56 ../src/guiOutput.py:198 ../src/output.py:138 ++msgid "Error" ++msgstr "Erreur" ++ ++#: ../src/guiOutput.py:57 ../src/guiOutput.py:200 ../src/output.py:140 ++msgid "Hint" ++msgstr "Conseil" ++ ++#: ../src/guiOutput.py:58 ../src/guiOutput.py:201 ../src/output.py:141 ++msgid "Info" ++msgstr "Info" ++ ++#: ../src/guiOutput.py:116 ++msgid "PASSED" ++msgstr "REUSSI" ++ ++#: ../src/guiOutput.py:117 ../src/guiOutput.py:197 ../src/output.py:136 ++msgid "WARNING" ++msgstr "ATTENTION" ++ ++#: ../src/guiOutput.py:118 ../src/guiOutput.py:197 ../src/output.py:136 ++msgid "ERROR" ++msgstr "ERREUR" ++ ++#: ../src/guiOutput.py:119 ++msgid "FAILURE !" ++msgstr "ECHEC !" ++ ++#: ../src/guiOutput.py:120 ../src/guiOutput.py:197 ../src/output.py:136 ++msgid "FATAL" ++msgstr "FATAL" ++ ++#: ../src/guiOutput.py:121 ++msgid "REFRESHED" ++msgstr "RAFFRAICHI" ++ ++#: ../src/guiOutput.py:197 ../src/output.py:136 ++msgid "PASS" ++msgstr "REUSSIR" ++ ++#: ../src/guiOutput.py:197 ../src/output.py:136 ++msgid "FAIL" ++msgstr "ECHOUER" ++ ++#: ../src/guiOutput.py:216 ++msgid "Test Name:" ++msgstr "Nom du Test:" ++ ++#: ../src/guiOutput.py:217 ++msgid "Test Result:" ++msgstr "Résultat du Test:" ++ ++#: ../src/guiOutput.py:241 ++msgid "Results saved to:" ++msgstr "Résultat sauvegardés dans:" ++ ++#: ../src/guiOutput.py:246 ++msgid "No results. Please run the test at first !" ++msgstr "Pas de résultat. Veuillez lancer un test d'abord !" ++ ++#: ../src/guiOutput.py:253 ++msgid "refreshing..." ++msgstr "actualisation..." ++ ++#: ../src/guiOutput.py:259 ++msgid "testing..." ++msgstr "test en cours..." ++ ++#. test not in testResults, but in timeResults, so the test is in the testing status right now ++#: ../src/guiOutput.py:346 ../src/guiOutput.py:372 ../src/guiOutput.py:381 ++msgid "Messages: " ++msgstr "Messages: " ++ ++#: ../src/guiOutput.py:347 ../src/guiOutput.py:373 ../src/guiOutput.py:382 ++msgid "Errors: " ++msgstr "Erreurs: " ++ ++#: ../src/guiOutput.py:348 ../src/guiOutput.py:374 ../src/guiOutput.py:383 ++msgid "Warnings: " ++msgstr "Avertissements: " ++ ++#: ../src/guiOutput.py:349 ../src/guiOutput.py:375 ../src/guiOutput.py:384 ++msgid "Hints: " ++msgstr "Conseils: " ++ ++#: ../src/guiOutput.py:350 ../src/guiOutput.py:376 ../src/guiOutput.py:385 ++msgid "Info messages: " ++msgstr "Messages d'info: " ++ ++#: ../src/guiOutput.py:352 ++msgid "Time the test was running: " ++msgstr "Durée d'exécution du test: " ++ ++#: ../src/guiOutput.py:356 ++msgid "" ++"Test failed: User pressed stop button. Please restart this test to get all " ++"results." ++msgstr "Test échoué: L'utilisateur a appuyé sur stop. Veuillez relancer ce test pour obtenir tous les résultats." ++ ++#: ../src/guiOutput.py:378 ../src/guiOutput.py:387 ++msgid "Summary of time: " ++msgstr "Résumé du temps: " ++ ++#: ../src/guiOutput.py:387 ++msgid "Unknown" ++msgstr "Inconnu" ++ ++#: ../src/guiOutput.py:410 ../src/guiOutput.py:428 ../src/guiRender.py:1167 ++msgid "All" ++msgstr "Tout" ++ ++#: ../src/guiOutput.py:428 ++msgid "Show all test results" ++msgstr "Montrer tous les résultats du test" ++ ++#: ../src/guiOutput.py:445 ++msgid "Name: " ++msgstr "Nom: " ++ ++#: ../src/guiOutput.py:445 ++msgid "Author: " ++msgstr "Auteur: " ++ ++#: ../src/guiOutput.py:465 ../src/guiRender.py:1172 ++msgid "Naive" ++msgstr "Naif" ++ ++#: ../src/guiOutput.py:465 ../src/guiRender.py:1173 ++msgid "Desktop" ++msgstr "Bureau" ++ ++#: ../src/guiOutput.py:465 ../src/guiRender.py:1174 ++msgid "Network" ++msgstr "Réseau" ++ ++#: ../src/guiOutput.py:465 ../src/guiRender.py:1175 ++msgid "Server" ++msgstr "Serveur" ++ ++#: ../src/guiOutput.py:465 ../src/guiRender.py:1176 ++msgid "Paranoid" ++msgstr "Paranoïaque" ++ ++#: ../src/guiOutput.py:480 ++msgid "Please wait, executing test " ++msgstr "Veuillez patienter, test en cours " ++ ++#: ../src/guiOutput.py:565 ++msgid "" ++"Configuration of test levels has changed.\n" ++"\n" ++"Do you want to save new configuration?" ++msgstr "" ++ ++#: ../src/guiRender.py:675 ../src/guiRender.py:1447 ++msgid "Wrong call of appendMessage() function: missing gtk.TreeModel" ++msgstr "" ++ ++#: ../src/guiRender.py:677 ../src/guiRender.py:1449 ++msgid "Wrong call of appendMessage() function: missing message string" ++msgstr "" ++ ++#: ../src/guiRender.py:1082 ++msgid "Overview" ++msgstr "Aperçu" ++ ++#: ../src/guiRender.py:1083 ++msgid "Test Results" ++msgstr "Résultats du Test" ++ ++#: ../src/guiRender.py:1101 ++msgid "Test info" ++msgstr "Infos sur le test" ++ ++#: ../src/guiRender.py:1110 ++msgid "Test groups" ++msgstr "Groupes de test" ++ ++#: ../src/guiRender.py:1119 ++msgid "Test is defined in levels" ++msgstr "Le test est défini dans les niveaux" ++ ++#: ../src/guiRender.py:1128 ++msgid "Test description" ++msgstr "Description du test" ++ ++#: ../src/guiRender.py:1179 ++msgid "Choose a group to filter tests" ++msgstr "" ++ ++#: ../src/guiRender.py:1180 ++msgid "Choose a level to run the test" ++msgstr "" ++ ++#: ../src/guiRender.py:1275 ++msgid "Summary" ++msgstr "Résumé" ++ ++#: ../src/guiRender.py:1307 ../src/guiRender.py:1428 ++msgid "Test" ++msgstr "Test" ++ ++#: ../src/guiRender.py:1308 ++msgid "Result" ++msgstr "Résultat" ++ ++#: ../src/guiRender.py:1371 ../src/guiRender.py:1373 ++msgid "Test does not meet the requirements: " ++msgstr "" ++ ++#: ../src/guiRender.py:1384 ++msgid "All tests done. " ++msgstr "Tous les tests finis. " ++ ++#: ../src/guiRender.py:1426 ++msgid "Mark" ++msgstr "Note" ++ ++#: ../src/guiRender.py:1427 ++msgid "Severity" ++msgstr "Sévérité" ++ ++#: ../src/guiRender.py:1429 ++msgid "Num" ++msgstr "Num" ++ ++#: ../src/guiRender.py:1430 ../src/output.py:284 ../src/output.py:334 ++msgid "Description" ++msgstr "Description" ++ ++#. Root menu "FILE" ++#: ../src/guiRender.py:1524 ../src/guiRender.py:1652 ++msgid "Start the selected test" ++msgstr "" ++ ++#: ../src/guiRender.py:1525 ../src/guiRender.py:1653 ++msgid "_Start the selected test" ++msgstr "" ++ ++#: ../src/guiRender.py:1528 ../src/guiRender.py:1656 ++msgid "Start the test" ++msgstr "Lancer le test" ++ ++#: ../src/guiRender.py:1529 ../src/guiRender.py:1657 ++msgid "Start checked tests in selected level" ++msgstr "" ++ ++#: ../src/guiRender.py:1530 ../src/guiRender.py:1658 ++msgid "_Start checked tests in selected level" ++msgstr "" ++ ++#: ../src/guiRender.py:1533 ../src/guiRender.py:1661 ++msgid "Start the whole level" ++msgstr "Lancer le niveau complet" ++ ++#: ../src/guiRender.py:1534 ++msgid "Load default level configuration" ++msgstr "" ++ ++#: ../src/guiRender.py:1535 ++msgid "_Load default level configuration" ++msgstr "" ++ ++#: ../src/guiRender.py:1538 ++msgid "Load default configuration for levels" ++msgstr "" ++ ++#: ../src/guiRender.py:1539 ++msgid "Clear and refresh test data" ++msgstr "" ++ ++#: ../src/guiRender.py:1540 ++msgid "_Clear & refresh test data" ++msgstr "" ++ ++#: ../src/guiRender.py:1543 ../src/guiRender.py:1756 ++msgid "Removes any data owned by a test and runs it just to recreate them." ++msgstr "" ++ ++#: ../src/guiRender.py:1546 ++msgid "Root Menu" ++msgstr "Menu Racine" ++ ++#: ../src/guiRender.py:1546 ++msgid "_Root Menu" ++msgstr "_Menu Racine" ++ ++#: ../src/guiRender.py:1662 ++msgid "Start" ++msgstr "Démarrer" ++ ++#: ../src/guiRender.py:1662 ++msgid "_Start" ++msgstr "_Démarrer" ++ ++#. --- ++#: ../src/guiRender.py:1665 ../src/guiRender.py:1760 ++msgid "Stop" ++msgstr "Stop" ++ ++#: ../src/guiRender.py:1665 ++msgid "S_top" ++msgstr "S_top" ++ ++#: ../src/guiRender.py:1668 ../src/guiRender.py:1763 ++msgid "Quit" ++msgstr "Quitter" ++ ++#: ../src/guiRender.py:1668 ++msgid "_Quit" ++msgstr "_Quitter" ++ ++#: ../src/guiRender.py:1670 ++msgid "Quit program" ++msgstr "Quitter le programme" ++ ++#: ../src/guiRender.py:1671 ++msgid "File" ++msgstr "Fichier" ++ ++#: ../src/guiRender.py:1671 ++msgid "_File" ++msgstr "_Fichier" ++ ++#. Root menu Edit ++#. self.renderRootMenuItem( _("Edit"), _("_Edit"), menuBar, None ) ++#. Root menu View ++#: ../src/guiRender.py:1676 ++msgid "Show info messages" ++msgstr "" ++ ++#: ../src/guiRender.py:1677 ../src/guiRender.py:1762 ++msgid "Show hints" ++msgstr "Montrer les conseils" ++ ++#: ../src/guiRender.py:1678 ++msgid "View" ++msgstr "Affichage" ++ ++#: ../src/guiRender.py:1678 ++msgid "_View" ++msgstr "_Affichage" ++ ++#. Root menu Tools ++#. self.renderRootMenuItem( _("Tools"), _("_Tools"), menuBar, None ) ++#. Root menu Help ++#: ../src/guiRender.py:1682 ++msgid "About" ++msgstr "A propos" ++ ++#: ../src/guiRender.py:1682 ++msgid "_About" ++msgstr "A _propos" ++ ++#: ../src/guiRender.py:1684 ++msgid "About Dialog" ++msgstr "A propos de SecTool" ++ ++#: ../src/guiRender.py:1685 ++msgid "Help" ++msgstr "Aide" ++ ++#: ../src/guiRender.py:1685 ++msgid "_Help" ++msgstr "Aid_e" ++ ++#. --- ++#: ../src/guiRender.py:1730 ../src/guiRender.py:1734 ++msgid "Start level" ++msgstr "Lancer le niveau" ++ ++#: ../src/guiRender.py:1735 ++msgid "Start selected _level" ++msgstr "Lancer le _niveau sélectionné" ++ ++#: ../src/guiRender.py:1737 ++msgid "Start whole level" ++msgstr "" ++ ++#: ../src/guiRender.py:1738 ++msgid "Start test" ++msgstr "Lancer le test" ++ ++#: ../src/guiRender.py:1739 ++msgid "Start selected _test" ++msgstr "Lancer le _test sélectionné" ++ ++#: ../src/guiRender.py:1741 ++msgid "Start choosen test" ++msgstr "Lancer le test choisi" ++ ++#. --- ++#: ../src/guiRender.py:1745 ++msgid "Clear tests" ++msgstr "Effacer les tests" ++ ++#: ../src/guiRender.py:1749 ++msgid "Clear and refresh all tests" ++msgstr "" ++ ++#: ../src/guiRender.py:1750 ++msgid "Clear & refresh all tests" ++msgstr "" ++ ++#: ../src/guiRender.py:1752 ++msgid "Removes all data for all tests" ++msgstr "" ++ ++#: ../src/guiRender.py:1753 ++msgid "Clear and refresh selected test" ++msgstr "" ++ ++#: ../src/guiRender.py:1754 ++msgid "Clear & refresh selected test" ++msgstr "" ++ ++#: ../src/guiRender.py:1761 ++msgid "Show info" ++msgstr "Montrer les infos" ++ ++#: ../src/guiRender.py:1764 ++msgid "Save..." ++msgstr "Enregistrer..." ++ ++#: ../src/mailoutput.py:165 ++msgid "" ++"Neither TARGET=LOCAL nor TARGET=SMTP found in config file (section[MAIL]" ++msgstr "" ++ ++#: ../src/output.py:136 ++msgid "INVALID" ++msgstr "INVALIDE" ++ ++#: ../src/output.py:169 ++#, python-format ++msgid "" ++"%s\n" ++"\tThe test did not change its result" ++msgstr "" ++ ++#: ../src/output.py:200 ++#, python-format ++msgid "\t%s:%s\n" ++msgstr "" ++ ++#: ../src/output.py:203 ++#, python-format ++msgid "\t%s:%s (Changed from: %s)\n" ++msgstr "" ++ ++#: ../src/output.py:215 ++#, python-format ++msgid "%s ->" ++msgstr "" ++ ++#: ../src/output.py:224 ++#, python-format ++msgid " %s: %s\n" ++msgstr "" ++ ++#: ../src/output.py:268 ++msgid "\tFailure" ++msgstr "" ++ ++#: ../src/output.py:283 ../src/output.py:330 ++msgid "Name" ++msgstr "Nom" ++ ++#: ../src/output.py:285 ../src/output.py:333 ++msgid "Levels" ++msgstr "Niveaux" ++ ++#: ../src/output.py:322 ++msgid "" ++"\n" ++"An asterisk (*) in the Levels column denotes test that can't be run due to " ++"missing requirements" ++msgstr "" ++ ++#: ../src/output.py:331 ++msgid "Script name" ++msgstr "Nom du script" ++ ++#: ../src/output.py:332 ++msgid "Groups" ++msgstr "Groupes" ++ ++#: ../src/output.py:346 ++msgid "Run report" ++msgstr "Lancer un rapport" ++ ++#: ../src/output.py:347 ++msgid "Total tests run" ++msgstr "Total des tests lancés" ++ ++#: ../src/output.py:348 ++msgid "Passed" ++msgstr "Réussi" ++ ++#: ../src/output.py:349 ++msgid "Warnings" ++msgstr "Avertissements" ++ ++#: ../src/output.py:350 ++msgid "Errors" ++msgstr "Erreurs" ++ ++#: ../src/output.py:351 ++msgid "Invalid runs" ++msgstr "" ++ ++#: ../src/output.py:352 ++msgid "Failures" ++msgstr "Echecs" ++ ++#: ../src/output.py:353 ++msgid "Fatal failures" ++msgstr "Erreurs fatales" ++ ++#: ../src/sectool-gui.py:80 ++msgid "Security Tool GUI" ++msgstr "" ++ ++#: ../src/sectool-gui.py:86 ++msgid "Security Tool" ++msgstr "" ++ ++#: ../src/sectool-gui.py:259 ++msgid "Cancelling, please wait..." ++msgstr "" ++ ++#: ../src/sectool-gui.py:291 ++msgid "Fedora Security Tool" ++msgstr "" ++ ++#: ../src/sectool-gui.py:292 ++msgid "Copyright by Red Hat " ++msgstr "" ++ ++#: ../src/sectool-gui.py:293 ++msgid "An auditing tool for Fedora and Red Hat systems only." ++msgstr "" ++ ++#: ../src/sectool-gui.py:294 ++msgid "Version" ++msgstr "Version" ++ ++#: ../src/sectool-gui.py:700 ++msgid "Initializing.." ++msgstr "" ++ ++#. : ^C .. what a noob ?!? ++#: ../src/sectool-gui.py:806 ../src/sectool.py:340 ++msgid "Exiting on user request.\n" ++msgstr "" ++ ++#: ../src/sectool.py:99 ++msgid "Specify a configuration file" ++msgstr "" ++ ++#: ../src/sectool.py:103 ++msgid "Debug mode" ++msgstr "Mode de débogage" ++ ++#: ../src/sectool.py:107 ++msgid "" ++"Print traceback for development purposes on encountering\n" ++"an error that is otherwise handled gracefully" ++msgstr "" ++ ++#: ../src/sectool.py:112 ++msgid "Display hints when available" ++msgstr "" ++ ++#: ../src/sectool.py:116 ++msgid "Send email report" ++msgstr "" ++ ++#: ../src/sectool.py:121 ++msgid "Filter tests by group" ++msgstr "" ++ ++#: ../src/sectool.py:125 ++msgid "Display only diff against previous run (if available)" ++msgstr "" ++ ++#: ../src/sectool.py:130 ++msgid "" ++"If running a level, include these tests that may be not defined in that " ++"level." ++msgstr "" ++ ++#: ../src/sectool.py:135 ++msgid "" ++"If running a level, exclude these tests that may be not defined in that " ++"level." ++msgstr "" ++ ++#: ../src/sectool.py:139 ++msgid "Print a report about the run after it finishes" ++msgstr "" ++ ++#: ../src/sectool.py:148 ++msgid "List tests and their level configuration" ++msgstr "" ++ ++#: ../src/sectool.py:153 ++msgid "Query info about a test" ++msgstr "" ++ ++#: ../src/sectool.py:158 ++msgid "" ++"Run all tests in a collection at a certain level.\n" ++"The level can be specified either as an integer (1-5) or string nickname\n" ++"(Naive, Desktop, Network, Server, Paranoid). See sectool(8) for more details." ++msgstr "" ++ ++#: ../src/sectool.py:165 ++msgid "Run selected tests" ++msgstr "" ++ ++#: ../src/sectool.py:170 ++msgid "Perform the action defined in the config file" ++msgstr "" ++ ++#: ../src/sectool.py:175 ++msgid "Cleans the XML cache which stores previous test results" ++msgstr "" ++ ++#: ../src/sectool.py:180 ++msgid "Removes any data owned by a test and runs it just to recreate them" ++msgstr "" ++ ++#: ../src/sectool.py:204 ++#, python-format ++msgid "Unknown action %s" ++msgstr "" ++ ++#: ../src/sectool.py:220 ../src/sectool.py:222 ++msgid "" ++"Bad level specification - use --level where is between 1 and 5" ++msgstr "" ++ ++#: ../src/sectool.py:268 ++msgid "Must select at least one action" ++msgstr "" ++ ++#: ../src/sectool.py:279 ++msgid "Only one action can be selected at a time" ++msgstr "" ++ ++#: ../src/sectool.py:308 ++#, python-format ++msgid "Could not instantiate action based upon %s" ++msgstr "" ++ ++#: ../src/tuierrors.py:13 ++#, python-format ++msgid "Error: %s" ++msgstr "" ++ ++#: ../src/tuierrors.py:31 ++#, python-format ++msgid "%s" ++msgstr "" ++ ++#: ../src/tuierrors.py:38 ++#, python-format ++msgid "SecTool Error: %s" ++msgstr "" ++ ++#: ../tests/aliases.sh:71 ../tests/aliases.sh:105 ++msgid "Please unset it the group writing bit" ++msgstr "" ++ ++#: ../tests/aliases.sh:78 ../tests/aliases.sh:112 ++msgid "Please unset it the world writing bit" ++msgstr "" ++ ++#: ../tests/aliases.sh:85 ../tests/aliases.sh:119 ++msgid "Please chown this file to root:root" ++msgstr "" ++ ++#. ############################ DEBUG ++#: ../tests/bash_defs_debug.sh:87 ../tests/bash_defs.sh:41 ++msgid "--" ++msgstr "" ++ ++#: ../tests/disc_usage.sh:39 ++#, sh-format ++msgid "" ++"Device $device mounted to $directory is full! There is $percent_used used!" ++msgstr "" ++ ++#: ../tests/disc_usage.sh:40 ../tests/disc_usage.sh:43 ++msgid "Please backup and delete unused files from this directory" ++msgstr "" ++ ++#: ../tests/disc_usage.sh:42 ++#, sh-format ++msgid "" ++"Device $device mounted to $directory is going to be full! There is " ++"$percent_used used!" ++msgstr "" ++ ++#: ../tests/exec-shield.sh:15 ++msgid "Exec-shield is disabled." ++msgstr "" ++ ++#: ../tests/exec-shield.sh:16 ../tests/exec-shield.sh:23 ++msgid "You can use \"sysctl\" command to turn it on." ++msgstr "" ++ ++#: ../tests/exec-shield.sh:22 ++msgid "Virtual addresses randomization is disabled." ++msgstr "" ++ ++#: ../tests/firewall.sh:701 ++msgid "IPv4 forwarding is ENABLED." ++msgstr "" ++ ++#: ../tests/firewall.sh:708 ++msgid "IPv4 source routing is ENABLED on ALL interfaces!" ++msgstr "" ++ ++#: ../tests/firewall.sh:714 ++msgid "IPv4 Source routing is ENABLED as default!" ++msgstr "" ++ ++#: ../tests/firewall.sh:819 ++msgid "IPv6 forwarding is ENABLED." ++msgstr "" ++ ++#: ../tests/group.sh:52 ../tests/home_files.sh:92 ../tests/passwd.sh:65 ++#: ../tests/shadow.sh:52 ++msgid "You have to be logged as root to run this test!" ++msgstr "" ++ ++#: ../tests/group.sh:72 ++#, sh-format ++msgid "$group: Line $i is empty" ++msgstr "" ++ ++#: ../tests/group.sh:73 ../tests/passwd.sh:87 ../tests/shadow.sh:71 ++msgid "Please delete this line." ++msgstr "" ++ ++#: ../tests/group.sh:81 ++#, sh-format ++msgid "$group: Line $i has wrong number of fields" ++msgstr "" ++ ++#: ../tests/group.sh:82 ++msgid "Please see 'man group' and correct this line." ++msgstr "" ++ ++#: ../tests/group.sh:95 ++#, sh-format ++msgid "$group: Line $i: missing groupname!" ++msgstr "" ++ ++#: ../tests/group.sh:96 ++msgid "" ++"Check this line, fill in first item (groupname), or delete the whole line." ++msgstr "" ++ ++#: ../tests/group.sh:103 ++#, sh-format ++msgid "$group: Line $i: Groupname $groupname contains disallowed characters." ++msgstr "" ++ ++#: ../tests/group.sh:104 ++#, sh-format ++msgid "" ++"Check this line and rename the groupname to contain lowercase letters only. " ++"Don't forget to update the $group_shadow file!" ++msgstr "" ++ ++#: ../tests/group.sh:113 ++#, sh-format ++msgid "$group: Line $i: Group $groupname has too long name." ++msgstr "" ++ ++#: ../tests/group.sh:114 ++#, sh-format ++msgid "" ++"Check this line and rename the name of the group to be shorter than " ++"$MaxLength characters. Don't forget to update the $group_shadow file" ++msgstr "" ++ ++#: ../tests/group.sh:120 ++#, sh-format ++msgid "" ++"$group: Line $i: Group $groupname has a password, but it is not shadowed" ++msgstr "" ++ ++#: ../tests/group.sh:121 ++#, sh-format ++msgid "" ++"Please use grpconv utility for moving group passwords from $group to " ++"$group_shadow" ++msgstr "" ++ ++#: ../tests/group.sh:127 ++#, sh-format ++msgid "$group: Line $i: Group ID of the group $groupname is not a valid number" ++msgstr "" ++ ++#: ../tests/group.sh:128 ++msgid "Please correct the group ID." ++msgstr "" ++ ++#: ../tests/group.sh:135 ++#, sh-format ++msgid "$group: Line $i: Group $groupname has GID out of range" ++msgstr "" ++ ++#: ../tests/group.sh:136 ++#, sh-format ++msgid "Change GID of this group to be in the range <0, $GID_MAX_VALUE>" ++msgstr "" ++ ++#. delete last coma ++#: ../tests/group.sh:151 ++#, sh-format ++msgid "Duplicate group name '$groupname' (lines $lines)" ++msgstr "" ++ ++#: ../tests/group.sh:152 ++msgid "" ++"Please change groupnames on these lines to be different or delete duplicate " ++"records" ++msgstr "" ++ ++#. delete last coma ++#: ../tests/group.sh:163 ++#, sh-format ++msgid "Duplicate group IDs '$groupID' (lines $lines)" ++msgstr "" ++ ++#: ../tests/group.sh:164 ++msgid "" ++"Please change IDs on these lines to be different or delete duplicate records" ++msgstr "" ++ ++#: ../tests/group.sh:172 ++#, sh-format ++msgid "User root has GID $root_gid, but should have 0" ++msgstr "" ++ ++#: ../tests/group.sh:173 ++msgid "Change root's GID to 0" ++msgstr "" ++ ++#: ../tests/home_dirs.sh:106 ../tests/openssh.sh:576 ../tests/routing.sh:27 ++msgid "This is a first run of the test. Some parts of audit are skipped." ++msgstr "" ++ ++#: ../tests/home_files.sh:103 ++#, sh-format ++msgid "" ++"Could not detect users' home directory in $useradd, the default will be used" ++msgstr "" ++ ++#: ../tests/home_files.sh:161 ++#, sh-format ++msgid "User \"$line_username\" can't read his $tested_file!" ++msgstr "" ++ ++#: ../tests/home_files.sh:167 ++#, sh-format ++msgid "" ++"User \"$line_username\" allows users from his group to read his $tested_file!" ++msgstr "" ++ ++#: ../tests/home_files.sh:171 ++#, sh-format ++msgid "" ++"User \"$line_username\" allows users from his group to write to his " ++"$tested_file!" ++msgstr "" ++ ++#: ../tests/home_files.sh:177 ++#, sh-format ++msgid "User \"$line_username\" allows other users to read his $tested_file!" ++msgstr "" ++ ++#: ../tests/home_files.sh:181 ++#, sh-format ++msgid "" ++"User \"$line_username\" allows other users to write to his $tested_file!" ++msgstr "" ++ ++#: ../tests/logfiles.sh:37 ++#, sh-format ++msgid "File $file doesn't exist!" ++msgstr "" ++ ++#: ../tests/logfiles.sh:38 ++msgid "Please create this file." ++msgstr "" ++ ++#: ../tests/logfiles.sh:43 ++#, sh-format ++msgid "File $file has wrong owner. The correct owner is $owner." ++msgstr "" ++ ++#: ../tests/logfiles.sh:44 ++msgid "Please change the owner of this file to the recommended one." ++msgstr "" ++ ++#: ../tests/logfiles.sh:50 ++#, sh-format ++msgid "File $file has wrong group. The correct group is $group." ++msgstr "" ++ ++#: ../tests/logfiles.sh:51 ++msgid "Please change the group of this file to the recommended one." ++msgstr "" ++ ++#: ../tests/logfiles.sh:58 ++#, sh-format ++msgid "File $file has wrong permssions! The correct permissions are $perm." ++msgstr "" ++ ++#: ../tests/logfiles.sh:59 ++msgid "Please change the permissions of this file to the recommended value." ++msgstr "" ++ ++#: ../tests/netserv.sh:102 ../tests/openssh.sh:159 ../tests/openvpn.sh:100 ++msgid "Created new SHA256 list." ++msgstr "" ++ ++#: ../tests/netserv.sh:105 ../tests/openssh.sh:164 ../tests/openvpn.sh:103 ++msgid "SHA256 list not found." ++msgstr "" ++ ++#: ../tests/netserv.sh:323 ++msgid "The origin of this file is unknown." ++msgstr "" ++ ++#: ../tests/netserv.sh:343 ++msgid "Update your system to get rid of this message." ++msgstr "" ++ ++#: ../tests/nfs.sh:28 ++#, sh-format ++msgid "File $EXPORTS was not found!" ++msgstr "" ++ ++#: ../tests/openssh.sh:267 ++msgid "Remove all unnecessary files from this directory." ++msgstr "" ++ ++#: ../tests/openssh.sh:283 ++msgid "SSHv1 is enabled. Using of this version is DEPRECATED." ++msgstr "" ++ ++#: ../tests/openssh.sh:375 ++msgid "Remote root login IS ENABLED." ++msgstr "" ++ ++#: ../tests/openssh.sh:379 ++msgid "Remote root login IS ENABLED only with publickey authentication." ++msgstr "" ++ ++#: ../tests/openssh.sh:382 ++msgid "Remote root login IS ENABLED, only forced commands allowed." ++msgstr "" ++ ++#: ../tests/openssh.sh:386 ++msgid "Remote root login IS NOT EXPLICITLY DISABLED." ++msgstr "" ++ ++#: ../tests/openssh.sh:387 ++msgid "" ++"The default value is not known. If you don't want to allow remote root " ++"login, then you should disable it in your sshd_config." ++msgstr "" ++ ++#: ../tests/openssh.sh:394 ++msgid "" ++"Remote access IS NOT restricted with the AllowGroups nor the AllowUsers " ++"directive" ++msgstr "" ++ ++#: ../tests/openssh.sh:395 ++msgid "" ++"It is recommended to resctrict remote login only to users that needs it or " ++"create a special group for this purpose." ++msgstr "" ++ ++#: ../tests/openssh.sh:401 ++msgid "Challenge-response and PAM authentication ARE DISABLED." ++msgstr "" ++ ++#: ../tests/openssh.sh:405 ++msgid "Processing of user's enviroment IS ENABLED." ++msgstr "" ++ ++#: ../tests/openssh.sh:409 ++msgid "StrictModes DISABLED." ++msgstr "" ++ ++#: ../tests/openssh.sh:413 ++msgid "Privilege separation IS DISABLED." ++msgstr "" ++ ++#: ../tests/openssh.sh:422 ++msgid "ClientAliveCountMax is set to 0 (no limit)" ++msgstr "" ++ ++#: ../tests/openssh.sh:424 ++msgid "ClientAliveCountMax is greater than 6" ++msgstr "" ++ ++#: ../tests/openssh.sh:432 ++msgid "ClientAliveInterval set to 0 (no limit)" ++msgstr "" ++ ++#: ../tests/openssh.sh:434 ++msgid "ClientAliveInterval is higher than 600 seconds" ++msgstr "" ++ ++#: ../tests/pam.sh:23 ++msgid "New passwords for system services aren't checked with cracklib." ++msgstr "" ++ ++#: ../tests/pam.sh:30 ++msgid "" ++"Account lockout after repetitive failed login attempts is not configured." ++msgstr "" ++ ++#: ../tests/passwd.sh:86 ++#, sh-format ++msgid "$passwd: Line $i is empty" ++msgstr "" ++ ++#: ../tests/passwd.sh:95 ++#, sh-format ++msgid "$passwd: Line $i has wrong number of fields" ++msgstr "" ++ ++#: ../tests/passwd.sh:96 ++msgid "Please see 'man 5 passwd' and correct this line." ++msgstr "" ++ ++#: ../tests/passwd.sh:112 ++#, sh-format ++msgid "$passwd: Line $i: missing username!" ++msgstr "" ++ ++#: ../tests/passwd.sh:113 ++msgid "" ++"Check this line, fill in first item (username), or delete the whole line." ++msgstr "" ++ ++#: ../tests/passwd.sh:120 ++#, sh-format ++msgid "" ++"$passwd: Line $i: User $username contains disallowed characters in his login." ++msgstr "" ++ ++#: ../tests/passwd.sh:121 ../tests/shadow.sh:102 ++msgid "" ++"Check this line and rename user's login to contain lowercase letters only." ++msgstr "" ++ ++#: ../tests/passwd.sh:130 ++#, sh-format ++msgid "$passwd: Line $i: User $username has too long username." ++msgstr "" ++ ++#: ../tests/passwd.sh:131 ++#, sh-format ++msgid "" ++"Check this line and rename user's login to be shorter than $MaxLength " ++"characters" ++msgstr "" ++ ++#: ../tests/passwd.sh:137 ++#, sh-format ++msgid "$passwd: Line $i: User $username has no password!" ++msgstr "" ++ ++#: ../tests/passwd.sh:138 ++msgid "Please use 'passwd' utility immediately to set his password!" ++msgstr "" ++ ++#: ../tests/passwd.sh:144 ++#, sh-format ++msgid "$passwd: Line $i: User ${username}'s password is not shadowed" ++msgstr "" ++ ++#: ../tests/passwd.sh:145 ++#, sh-format ++msgid "Please use pwconv utility for moving passwords from $passwd to $shadow" ++msgstr "" ++ ++#: ../tests/passwd.sh:152 ++#, sh-format ++msgid "$passwd: Line $i: User ID of user $username is not a valid number" ++msgstr "" ++ ++#: ../tests/passwd.sh:153 ++#, sh-format ++msgid "Please correct the user ID in $passwd." ++msgstr "" ++ ++#: ../tests/passwd.sh:159 ++#, sh-format ++msgid "$passwd: Line $i: Group ID of user $username is not a valid number" ++msgstr "" ++ ++#: ../tests/passwd.sh:160 ++#, sh-format ++msgid "Please correct the group ID in $passwd." ++msgstr "" ++ ++#: ../tests/passwd.sh:167 ++#, sh-format ++msgid "$passwd: Line $i: User $username has UID out of range" ++msgstr "" ++ ++#: ../tests/passwd.sh:168 ++#, sh-format ++msgid "" ++"Change UID of this user to be in the range <$UID_MIN_VALUE, $UID_MAX_VALUE> " ++"(ordinary users) or less than $UID_MIN_VALUE (daemons)." ++msgstr "" ++ ++#: ../tests/passwd.sh:173 ++#, sh-format ++msgid "$passwd: Line $i: User $username has GID out of range" ++msgstr "" ++ ++#: ../tests/passwd.sh:174 ++#, sh-format ++msgid "" ++"Change GID of this user to be in the range <$GID_MIN_VALUE, $GID_MAX_VALUE> " ++"(ordinary users) or less than $GID_MIN_VALUE (daemons)." ++msgstr "" ++ ++#: ../tests/passwd.sh:182 ++#, sh-format ++msgid "" ++"$passwd: Line $i: User $username has UID 0, but his login is not 'root'!" ++msgstr "" ++ ++#: ../tests/passwd.sh:183 ++#, sh-format ++msgid "" ++"If there are more users with UID 0 in $passwd (you should see them on next " ++"lines), delete all but the first. Then set his name to root." ++msgstr "" ++ ++#: ../tests/passwd.sh:189 ++#, sh-format ++msgid "$passwd: Line $i: User $username has UID 1, but his login is not 'bin'!" ++msgstr "" ++ ++#: ../tests/passwd.sh:190 ++#, sh-format ++msgid "" ++"If there are more users with UID 1 in $passwd (you should see them on next " ++"lines), delete all but the first. Then set his name to 'bin'." ++msgstr "" ++ ++#: ../tests/passwd.sh:197 ++#, sh-format ++msgid "" ++"$passwd: Line $i: User $username has GID 0, but his login is not 'root'!" ++msgstr "" ++ ++#: ../tests/passwd.sh:198 ++#, sh-format ++msgid "" ++"If there are more users with GID 0 in $passwd (you should see them on next " ++"lines), delete all but the first. Then set his name to root." ++msgstr "" ++ ++#: ../tests/passwd.sh:204 ++#, sh-format ++msgid "$passwd: Line $i: User $username has GID 1, but his login is not 'bin'!" ++msgstr "" ++ ++#: ../tests/passwd.sh:205 ++#, sh-format ++msgid "" ++"If there are more users with GID 1 in $passwd (you should see them on next " ++"lines), delete all but the first. Then set his name to 'bin'." ++msgstr "" ++ ++#: ../tests/passwd.sh:211 ++#, sh-format ++msgid "$passwd: Line $i: User $username has a negative user ID" ++msgstr "" ++ ++#: ../tests/passwd.sh:212 ++#, sh-format ++msgid "" ++"Set his UID to non-negative and not yet used value in the range <" ++"$UID_MIN_VALUE,$UID_MAX_VALUE> (ordinary users) or less than $UID_MIN_VALUE " ++"(daemons)." ++msgstr "" ++ ++#: ../tests/passwd.sh:218 ++#, sh-format ++msgid "$passwd: Line $i: User $username has a negative group ID" ++msgstr "" ++ ++#: ../tests/passwd.sh:219 ++#, sh-format ++msgid "" ++"Set his GID to non-negative and not yet used value in the range <" ++"$GID_MIN_VALUE,$GID_MAX_VALUE> (ordinary users) or less than $GID_MIN_VAL " ++"(daemons)." ++msgstr "" ++ ++#: ../tests/passwd.sh:238 ++#, sh-format ++msgid "$passwd: Line $i: User $username has strange shell $shell" ++msgstr "" ++ ++#: ../tests/passwd.sh:239 ++msgid "" ++"Set last field on this line to /bin/bash, or add the shell to /etc/shells" ++msgstr "" ++ ++#: ../tests/passwd.sh:281 ++#, sh-format ++msgid "" ++"User $user (passwd line $line) has the same UID ($uid) as user " ++"$prev_username (passwd line $prev_line)" ++msgstr "" ++ ++#: ../tests/passwd.sh:282 ++msgid "" ++"Please change UID of this user and don't forget to chown his home directory" ++msgstr "" ++ ++#. delete last coma ++#: ../tests/passwd.sh:297 ++#, sh-format ++msgid "Duplicate login '$user' ($passwd lines $lines)" ++msgstr "" ++ ++#: ../tests/passwd.sh:298 ../tests/shadow.sh:136 ++msgid "" ++"Please change usernames on these lines to be different or delete duplicate " ++"records" ++msgstr "" ++ ++#: ../tests/passwd.sh:306 ++#, sh-format ++msgid "User root has UID $root_uid, but should have 0" ++msgstr "" ++ ++#: ../tests/passwd.sh:307 ++msgid "Change root's UID to 0" ++msgstr "" ++ ++#: ../tests/path.sh:70 ++#, sh-format ++msgid "" ++"Path variable contains directory $dir, which doesn't exist or is not an " ++"directory." ++msgstr "" ++ ++#: ../tests/path.sh:71 ++msgid "Please look in your startup scripts and remove this setting" ++msgstr "" ++ ++#: ../tests/path.sh:76 ++#, sh-format ++msgid "Path variable contains directory $dir, which is group-writable" ++msgstr "" ++ ++#: ../tests/path.sh:77 ../tests/path.sh:83 ++msgid "" ++"Please look in your startup scripts and remove this setting. This directory " ++"can be used to make you execute a fake (and dangerous) binary file, i.e. ls" ++msgstr "" ++ ++#: ../tests/path.sh:82 ++#, sh-format ++msgid "Path variable contains directory $dir, which is world-writable" ++msgstr "" ++ ++#: ../tests/path.sh:93 ++#, sh-format ++msgid "" ++"File ${file}, which is placed in PATH directory ${dir}, is writable NOT only " ++"by his owner! The correct permissions should be 755." ++msgstr "" ++ ++#: ../tests/path.sh:94 ++msgid "" ++"This is VERY dangerous, since one can change contents of this executable. " ++"Please set permissions of this file to the recommended one immediately!" ++msgstr "" ++ ++#: ../tests/path.sh:106 ++#, sh-format ++msgid "" ++"File ${file}, which is placed in PATH directory ${dir}, is owned by someone " ++"else than by root!" ++msgstr "" ++ ++#: ../tests/path.sh:107 ++msgid "" ++"This is VERY dangerous, since one can change contents of this executable. " ++"Please change the owner and group of this file to 'root' immediately!" ++msgstr "" ++ ++#: ../tests/permissions.sh:70 ++#, sh-format ++msgid "Directory $dir doesn't exist!" ++msgstr "" ++ ++#: ../tests/permissions.sh:71 ++msgid "Please create this directory." ++msgstr "" ++ ++#: ../tests/permissions.sh:77 ++#, sh-format ++msgid "Directory $dir has wrong owner" ++msgstr "" ++ ++#: ../tests/permissions.sh:78 ++msgid "Please change owner of this directory to root." ++msgstr "" ++ ++#: ../tests/permissions.sh:84 ++#, sh-format ++msgid "" ++"Directory $dir has wrong permissions! The correct permissions should be " ++"$perm." ++msgstr "" ++ ++#: ../tests/permissions.sh:85 ++msgid "Please change the permissions to the recommended value." ++msgstr "" ++ ++#: ../tests/selftest.sh:37 ++msgid "Tests are not executed under root" ++msgstr "" ++ ++#: ../tests/selftest.sh:43 ++msgid "Variable \"VAR_NAMES\" is empty or not exported." ++msgstr "" ++ ++#: ../tests/selinux.sh:19 ++msgid "" ++"Using Enforing mode is highly recommended. See selinux manual page for " ++"switching to Enforcing mode." ++msgstr "" ++ ++#: ../tests/shadow.sh:70 ++#, sh-format ++msgid "$shadow: Line $i is empty" ++msgstr "" ++ ++#: ../tests/shadow.sh:79 ++#, sh-format ++msgid "$shadow: Line $i has wrong number of fields" ++msgstr "" ++ ++#: ../tests/shadow.sh:80 ++msgid "Please see 'man 5 shadow' and correct this line." ++msgstr "" ++ ++#: ../tests/shadow.sh:93 ++#, sh-format ++msgid "$shadow: Line $i: missing username!" ++msgstr "" ++ ++#: ../tests/shadow.sh:94 ++msgid "Check this line, fill in first item (username), or delete whole line." ++msgstr "" ++ ++#: ../tests/shadow.sh:101 ++#, sh-format ++msgid "" ++"$shadow: Line $i: User $username contains disallowed characters in his login." ++msgstr "" ++ ++#: ../tests/shadow.sh:111 ++#, sh-format ++msgid "$shadow: Line $i: User $username has too long username." ++msgstr "" ++ ++#: ../tests/shadow.sh:112 ++#, sh-format ++msgid "" ++"Check this line in $shadow and rename user's login to be shorter than " ++"$MaxLength characters" ++msgstr "" ++ ++#: ../tests/shadow.sh:118 ++#, sh-format ++msgid "$shadow: Line $i: User $username has no password!" ++msgstr "" ++ ++#: ../tests/shadow.sh:119 ++msgid "Run 'passwd' utility immediately to set his password!" ++msgstr "" ++ ++#: ../tests/tcp_wrappers.sh:63 ++msgid "" ++"Please consider restricting access to this service i.e. according to IP " ++"address ranges" ++msgstr "" ++ ++#: ../tests/xinetd.sh:66 ../tests/xinetd.sh:75 ++msgid "auth service IS ENABLED" ++msgstr "" ++ ++#: ../tests/xinetd.sh:84 ++msgid "systat service IS ENABLED" ++msgstr "" ++ ++#: ../tests/xinetd.sh:93 ++msgid "chargen service IS ENABLED" ++msgstr "" ++ ++#: ../tests/xinetd.sh:102 ++msgid "echo service IS ENABLED" ++msgstr "" ++ ++#: ../tests/xinetd.sh:111 ++msgid "finger service IS ENABLED" ++msgstr "" ++ ++#: ../tests/xinetd.sh:120 ++msgid "netstat service IS ENABLED" ++msgstr "" ++ ++#: ../tests/xinetd.sh:129 ++msgid "rusers service IS ENABLED" ++msgstr "" ++ ++#: ../src/filesystem.c:255 ++msgid "" ++"No local devices found. This is probably due to a misconfiguration. Check " ++"the FSTYPES variable in dsc file.\n" ++msgstr "" ++ ++#: ../src/filesystem.c:257 ++msgid "Please set the FSTYPES variable in dsc file.\n" ++msgstr "" ++ ++#: ../src/filesystem.c:289 ++msgid "block device" ++msgstr "périphérique bloc" ++ ++#: ../src/filesystem.c:290 ++msgid "character device" ++msgstr "périphérique caractère" ++ ++#: ../src/filesystem.c:291 ++msgid "directory" ++msgstr "répertoire" ++ ++#: ../src/filesystem.c:292 ++msgid "FIFO/pipe" ++msgstr "FIFO/pipe" ++ ++#: ../src/filesystem.c:293 ++msgid "symlink" ++msgstr "lien symbolique" ++ ++#: ../src/filesystem.c:294 ++msgid "regular file" ++msgstr "fichier régulier" ++ ++#: ../src/filesystem.c:295 ++msgid "socket" ++msgstr "socket" ++ ++#: ../src/filesystem.c:296 ++msgid "unknown" ++msgstr "inconnu" ++ ++#: ../src/filesystem.c:374 ++#, c-format ++msgid "Mislabeled %s '%s' found. Labeled as '%s', should be '%s'.\n" ++msgstr "" ++ ++#: ../src/filesystem.c:376 ++msgid "File is not labeled as defined in configuration. See man restorecon.\n" ++msgstr "" ++ ++#: ../src/filesystem.c:397 ++#, c-format ++msgid "User ID of %s \"%s\" doesn't exist in user database.\n" ++msgstr "" ++ ++#: ../src/filesystem.c:403 ++#, c-format ++msgid "Group ID of %s \"%s\" doesn't exist in group database.\n" ++msgstr "" ++ ++#: ../src/filesystem.c:412 ++#, c-format ++msgid "File \"%s\" is world writable.\n" ++msgstr "" ++ ++#: ../src/filesystem.c:418 ++#, c-format ++msgid "File \"%s\" is executable and world writable.\n" ++msgstr "" ++ ++#: ../src/filesystem.c:420 ++#, c-format ++msgid "File \"%s\" is executable and group writable.\n" ++msgstr "" ++ ++#: ../src/filesystem.c:434 ++#, c-format ++msgid "File \"%s\" is SUID script.\n" ++msgstr "" ++ ++#: ../src/filesystem.c:449 ++#, c-format ++msgid "The executable file \"%s\" doesn't belong to any package.\n" ++msgstr "" ++ ++#: ../src/filesystem.c:461 ++#, c-format ++msgid "Directory \"%s\" is world writable but the sticky bit is not set.\n" ++msgstr "" ++ ++#: ../src/filesystem.c:478 ++#, c-format ++msgid "Symbolic link \"%s\" points to a non-existent file \"%s\".\n" ++msgstr "" ++ ++#: ../src/filesystem.c:575 ++#, c-format ++msgid "rpmReadConfigFiles: Failed :[\n" ++msgstr "" ++ ++#: ../src/filesystem.c:576 ++msgid "RPMCHECK is enabled and RPM configuration loading failed.\n" ++msgstr "" ++ ++#: ../src/filesystem.c:588 ++msgid "" ++"SELINUXCHECK is enabled but filesystem test was not compiled with SELinux " ++"support.\n" ++msgstr "" ++ ++#: ../src/filesystem.c:645 ++msgid "Nothing to check, INCLUDE variable is empty.\n" ++msgstr "" ++ ++#: ../src/sectool.c:56 ++#, c-format ++msgid "Internal error: Unknown return code %d\n" ++msgstr "" ++ ++#: ../src/sectool.c:88 ++#, c-format ++msgid "Internal error: Unknown message type %d\n" ++msgstr "" ++ +diff --git a/src/actions.py b/src/actions.py +index 333c6d2..d4c4c50 100644 +--- a/src/actions.py ++++ b/src/actions.py +@@ -164,9 +164,8 @@ class ST_RunAction(ST_Action): + result = self._handle_missing_requirement(test.dsc["HEADER"]["NAME"], e) + + if result.result == scheduler.ST_TestResult.r_fatal: +- print >>self.stream, self.formatter.test_result_header(test.dsc['HEADER']['NAME'], raw=not self.stream.isatty()) +- print >>self.stream, self.formatter.output_one_result(result, self.options) +- raise tuierrors.SecToolActionError(self.name, _("Test %s failed in a fatal way - returned %d. Stopping execution of the rest of the tests" % (test.dsc['HEADER']['NAME'], result.return_code))) ++ print >>self.stream, _(" Test %s failed in a fatal way - returned %d. Stopping execution of the rest of the tests" % (test.dsc['HEADER']['NAME'], result.return_code)) ++ return result + + return result + +diff --git a/src/filesystem.c b/src/filesystem.c +index e6c69d3..93ad23a 100644 +--- a/src/filesystem.c ++++ b/src/filesystem.c +@@ -151,8 +151,8 @@ int matchsymwhite (const char *symlink, const char *target) { + register size_t i; + + for (i = 0; i < symwhite_arr_size; ++i) { +- if (fnmatch ( symwhite_arr[i], symlink, FNM_PATHNAME) == 0 && +- fnmatch (symwhite_tarr[i], target, FNM_PATHNAME) == 0) { ++ if (fnmatch ( symwhite_arr[i], symlink, 0) == 0 && ++ fnmatch (symwhite_tarr[i], target, 0) == 0) { + return 1; + } + } +@@ -341,7 +341,7 @@ int isexcluded (const char *path) { + int islocal (dev_t devid) { + register size_t l,r,d; + +- assert (DEVid_count > 1); ++ assert (DEVid_count > 0); + + l = 0; + r = DEVid_count - 1; +diff --git a/src/sectool.c b/src/sectool.c +index 542fa72..1e59793 100644 +--- a/src/sectool.c ++++ b/src/sectool.c +@@ -39,21 +39,27 @@ void init_env (struct envinit_t e[]) { + + void test_exit (int ret, const char *msg, ...) { + va_list list; +- ++ char *name = getenv ("NAME"); ++ ++ if (name == NULL) ++ name = "Unknown"; ++ + switch (ret) + { + case E_OK: ++ fprintf (stdout, "Test: %s, Succeeded\n", name); + exit (ret); +- ++ + case E_FAIL: + case E_FATAL: + va_start (list, msg); +- vfprintf (stderr, msg, list); ++ fprintf (stdout, "Test: %s, Error: %d, - ", name, ret); ++ vfprintf (stdout, msg, list); + va_end (list); + exit (ret); + + default: +- fprintf (stderr, _("Internal error: Unknown return code %d\n"), ret); ++ fprintf (stderr, _("Test: %s, Error: %d, - Internal error: Unknown return code %d\n"), name, E_FAIL, ret); + exit (E_FAIL); + } + } +diff --git a/tests/aliases.sh b/tests/aliases.sh +index b506475..4056030 100755 +--- a/tests/aliases.sh ++++ b/tests/aliases.sh +@@ -28,7 +28,7 @@ if (( ${REFRESH} == 1 )); then + fi + + # test all defined aliases +-bash -l -c 'alias' | sed 's/^alias//' | ++bash -l -c 'alias' | grep '^alias ' | sed 's/^alias//' | + { + while read line + do +diff --git a/tests/firewall.sh b/tests/firewall.sh +index 9f0a0a0..38db109 100755 +--- a/tests/firewall.sh ++++ b/tests/firewall.sh +@@ -528,7 +528,7 @@ function check_chain () { + + if [[ -n "${LAST}" ]]; then + case "${LAST}" in +- REJECT) ++ REJECT|DROP) + return ${E_OK} + ;; + ACCEPT) diff --git a/sectool-0.9.2-man_files.patch b/sectool-0.9.2-man_files.patch deleted file mode 100644 index 23f14d2..0000000 --- a/sectool-0.9.2-man_files.patch +++ /dev/null @@ -1,28 +0,0 @@ -diff -up sectool-0.9.2/src/sectool.8.man_files sectool-0.9.2/src/sectool.8 ---- sectool-0.9.2/src/sectool.8.man_files 2008-09-10 11:44:31.000000000 +0200 -+++ sectool-0.9.2/src/sectool.8 2008-12-02 09:50:18.000000000 +0100 -@@ -156,6 +156,24 @@ The configuration file is stored in /etc - - sectool --level 5 --mail admin@mydomain.com - -+.SH FILES -+. -+.TP -+/etc/sectool/sectool.conf -+Configuration file -+. -+.TP -+/etc/sectool/tests -+Test directory with description files ( .dsc files ) -+. -+.TP -+/etc/share/sectool/tests -+Test directory with source files -+. -+.TP -+/var/log/sectool.log -+Log file, where sectool stores output from tests -+. - .SH BUGS - Of course there are no bugs. If you still believe you have found one, please include a session with debug information turned on (option - .B --debug). diff --git a/sectool.spec b/sectool.spec index 52065d3..5e3a7d3 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,21 +1,22 @@ Summary: A security audit system and intrusion detection system Name: sectool -Version: 0.9.1 -Release: 9 +Version: 0.9.2 +Release: 4%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: %{name}-%{version}.tar.bz2 Source1: sectool.log Patch1: sectool-0.9.1-cronieReq.patch -Patch2: sectool-0.9.1-setVar.patch -Patch3: sectool-0.9.1-getValueFromH.patch -Patch4: sectool-0.9.1-selinux.patch -Patch5: sectool-0.9.1-zsh.patch -Patch6: sectool-0.9.2-man_files.patch +Patch2: sectool-0.9.2-fixing.patch +#Patch2: sectool-0.9.1-setVar.patch +#Patch3: sectool-0.9.1-getValueFromH.patch +#Patch4: sectool-0.9.1-selinux.patch +#Patch5: sectool-0.9.1-zsh.patch License: GPLv2+ Group: Applications/System -Requires: gettext coreutils which libselinux -Requires: python2 rpm-python libselinux-python -BuildRequires: desktop-file-utils gettext intltool rpm-devel asciidoc libselinux-devel +Requires: gettext coreutils libselinux +Requires: python2 rpm-python libselinux-python glibc-headers +BuildRequires: desktop-file-utils gettext intltool rpm-devel asciidoc +BuildRequires: libselinux-devel glibc-headers BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) %package gui @@ -39,11 +40,11 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %prep %setup -q %patch1 -p1 -b .cronieReq -%patch2 -p1 -b .setVar -%patch3 -p1 -b .getValueFromH -%patch4 -p1 -b .selinux -%patch5 -p1 -b .zsh -%patch6 -p1 -b .man_files +%patch2 -p1 -b .fixing +#%patch2 -p1 -b .setVar +#%patch3 -p1 -b .getValueFromH +#%patch4 -p1 -b .selinux +#%patch5 -p1 -b .zsh %build make %{?_smp_mflags} @@ -68,6 +69,10 @@ sed -i 's,__ico_path = \(.*\),__ico_path = "%{_datadir}/pixmaps/sectool/",' $RPM #this file is just for development rm $RPM_BUILD_ROOT/%{_datadir}/sectool/scheduler/selftest.py +# remove debug stuff +rm -f $RPM_BUILD_ROOT/%{_datadir}/sectool/tests/showvars.sh +rm -f $RPM_BUILD_ROOT/%{_sysconfdir}/sectool/tests/00_showvars.dsc + %find_lang %{name} %clean @@ -104,25 +109,22 @@ rm -rf $RPM_BUILD_ROOT %{_datadir}/pixmaps/sectool-gui.png %{_datadir}/pixmaps/sectool-min.png %{_datadir}/applications/fedora-sectool.desktop -%dir %{_datadir}/pixmaps/sectool %{_datadir}/pixmaps/sectool/*.png %changelog -* Fri Mar 06 2009 Jesse Keating - 0.9.1-9 -- Rebuild for new rpm +* Mon Jan 26 2009 Daniel Kopecek - 0.9.2-4 +- removed showvars.dsc -* Wed Feb 25 2009 Fedora Release Engineering - 0.9.1-8 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild +* Fri Jan 23 2009 Daniel Kopecek - 0.9.2-3 +- removed showvars.sh +- added dist macro to Release: -* Thu Dec 4 2008 Jakub Hrozek - 0.9.1-7 -- apply mbarabas' manpage patch +* Tue Dec 02 2008 Daniel Kopecek - 0.9.2-2 +- bugfix release -* Mon Dec 1 2008 Michael Schwendt - 0.9.1-6 -- Include /usr/share/pixmaps/sectool directory in -gui package. - -* Mon Dec 01 2008 Ignacio Vazquez-Abrams - 0.9.1-5 -- Rebuild for Python 2.6 +* Mon Nov 24 2008 Daniel Kopecek - 0.9.2-1 +- upgrade, see changelog for changes * Mon Nov 03 2008 Peter Vrabec - 0.9.1-4 - checking zsh home files (#469913) diff --git a/sources b/sources index d73b14a..baef59f 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -1bf9e281318b77044c96eb68028157ce sectool-0.9.1.tar.bz2 +6d145a49ffbd0ce1876099208ec59bda sectool-0.9.2.tar.bz2 From 5eaf21af2f7a19fc33f249f4d80ea4042f56a2a8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ville=20Skytt=C3=A4?= Date: Wed, 20 May 2009 21:39:47 +0000 Subject: [PATCH 02/33] - Build with $RPM_OPT_FLAGS (#497231). --- sectool-0.9.2-optflags.patch | 12 ++++++++++++ sectool.spec | 7 ++++++- 2 files changed, 18 insertions(+), 1 deletion(-) create mode 100644 sectool-0.9.2-optflags.patch diff --git a/sectool-0.9.2-optflags.patch b/sectool-0.9.2-optflags.patch new file mode 100644 index 0000000..9779cf7 --- /dev/null +++ b/sectool-0.9.2-optflags.patch @@ -0,0 +1,12 @@ +diff -up sectool-0.9.2/src/Makefile~ sectool-0.9.2/src/Makefile +--- sectool-0.9.2/src/Makefile~ 2008-11-13 11:08:40.000000000 +0200 ++++ sectool-0.9.2/src/Makefile 2009-04-23 00:19:30.000000000 +0300 +@@ -1,7 +1,7 @@ + include ../sectool.mk + + CC= gcc +-CFLAGS= -Wall -O2 -ffast-math -I. -D_FILE_OFFSET_BITS=64 -DTEST_SELINUX -I/usr/include/rpm ++CFLAGS= -Wall -O2 -ffast-math $(RPM_OPT_FLAGS) -I. -D_FILE_OFFSET_BITS=64 -DTEST_SELINUX -I/usr/include/rpm + LDFLAGS= -lrpm -lselinux + + SRCS_sectool=sectool.c diff --git a/sectool.spec b/sectool.spec index 5e3a7d3..15c6d8a 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.2 -Release: 4%{?dist} +Release: 5%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: %{name}-%{version}.tar.bz2 Source1: sectool.log @@ -11,6 +11,7 @@ Patch2: sectool-0.9.2-fixing.patch #Patch3: sectool-0.9.1-getValueFromH.patch #Patch4: sectool-0.9.1-selinux.patch #Patch5: sectool-0.9.1-zsh.patch +Patch6: sectool-0.9.2-optflags.patch License: GPLv2+ Group: Applications/System Requires: gettext coreutils libselinux @@ -45,6 +46,7 @@ sectool-gui provides a GTK-based graphical user interface to sectool. #%patch3 -p1 -b .getValueFromH #%patch4 -p1 -b .selinux #%patch5 -p1 -b .zsh +%patch6 -p1 -b .optflags %build make %{?_smp_mflags} @@ -113,6 +115,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Thu May 21 2009 Ville Skyttä - 0.9.2-5 +- Build with $RPM_OPT_FLAGS (#497231). + * Mon Jan 26 2009 Daniel Kopecek - 0.9.2-4 - removed showvars.dsc From 67b883893fecc8a148989a31421b6c11efa79a08 Mon Sep 17 00:00:00 2001 From: Peter Vrabec Date: Wed, 3 Jun 2009 10:36:18 +0000 Subject: [PATCH 03/33] upgrade --- .cvsignore | 2 +- sectool-0.9.1-cronieReq.patch | 11 - sectool-0.9.1-getValueFromH.patch | 106 -- sectool-0.9.1-selinux.patch | 33 - sectool-0.9.1-setVar.patch | 46 - sectool-0.9.1-zsh.patch | 18 - sectool-0.9.2-fixing.patch | 1778 ----------------------------- sectool.spec | 30 +- sources | 2 +- 9 files changed, 11 insertions(+), 2015 deletions(-) delete mode 100644 sectool-0.9.1-cronieReq.patch delete mode 100644 sectool-0.9.1-getValueFromH.patch delete mode 100644 sectool-0.9.1-selinux.patch delete mode 100644 sectool-0.9.1-setVar.patch delete mode 100644 sectool-0.9.1-zsh.patch delete mode 100644 sectool-0.9.2-fixing.patch diff --git a/.cvsignore b/.cvsignore index 0995550..4bd8b9d 100644 --- a/.cvsignore +++ b/.cvsignore @@ -1 +1 @@ -sectool-0.9.2.tar.bz2 +sectool-0.9.3.tar.bz2 diff --git a/sectool-0.9.1-cronieReq.patch b/sectool-0.9.1-cronieReq.patch deleted file mode 100644 index 5e1436e..0000000 --- a/sectool-0.9.1-cronieReq.patch +++ /dev/null @@ -1,11 +0,0 @@ -diff -up sectool-0.9.1/tests/12_cron.dsc.cronieReq sectool-0.9.1/tests/12_cron.dsc ---- sectool-0.9.1/tests/12_cron.dsc.cronieReq 2008-10-23 14:10:21.000000000 +0200 -+++ sectool-0.9.1/tests/12_cron.dsc 2008-10-23 14:10:34.000000000 +0200 -@@ -6,6 +6,7 @@ DESCRIPTION="Basic crontab checking. - permissions of cron related dirs and commands listed in crontab." - LEVELS="1 2 3 4 5" - GROUPS="daemons" -+REQUIRES="cronie" - AUTHOR="Daniel Kopecek " - - [DEFAULT] diff --git a/sectool-0.9.1-getValueFromH.patch b/sectool-0.9.1-getValueFromH.patch deleted file mode 100644 index dd11bae..0000000 --- a/sectool-0.9.1-getValueFromH.patch +++ /dev/null @@ -1,106 +0,0 @@ -diff --git a/tests/bash_defs.sh b/tests/bash_defs.sh -index 47aa4ec..09e06b3 100644 ---- a/tests/bash_defs.sh -+++ b/tests/bash_defs.sh -@@ -187,16 +187,17 @@ function canLogIn { - # getValueFromH '/usr/include/bits/utmp.h' 'UT_NAMESIZE' - # echo $ReturnVal - function getValueFromH { -- if ! [[ -r "$1" ]] -- then -- report 'WARNING' 0 "Can't read a constant $2, header file $1 not found" -+ if ! [[ -r "$1" ]]; then -+ report 'WARNING' 1234 "Can't read a constant $2, header file $1 not found" -+ return 0 - else - line="$(egrep "^#define $2..*" $1)" -- if [[ -n "$line" ]] -- then -- ReturnVal="$(echo "$line" | cut -f2)" -+ if [[ -n "$line" ]]; then -+ l_int retval=$(echo "$line" | cut -f2) -+ return $retval - else -- report 'WARNING' 0 "Can't read a constant $2 from file $1, definition of the constant not found in this file" -+ report 'WARNING' 1234 "Can't read a constant $2 from file $1, definition of the constant not found in this file" -+ return 0 - fi - fi - } -diff --git a/tests/bash_defs_debug.sh b/tests/bash_defs_debug.sh -index a0d548d..d3beeff 100644 ---- a/tests/bash_defs_debug.sh -+++ b/tests/bash_defs_debug.sh -@@ -352,18 +352,19 @@ function canLogIn { - # getValueFromH '/usr/include/bits/utmp.h' 'UT_NAMESIZE' - # echo $ReturnVal - function getValueFromH { -- if ! [[ -r "$1" ]] -- then -- report 'WARNING' 0 "Can't read a constant $2, header file $1 not found" -- else -- line="$(egrep "^#define $2..*" $1)" -- if [[ -n "$line" ]] -- then -- ReturnVal="$(echo "$line" | cut -f2)" -- else -- report 'WARNING' 0 "Can't read a constant $2 from file $1, definition of the constant not found in this file" -- fi -- fi -+ if ! [[ -r "$1" ]]; then -+ report 'WARNING' 1234 "Can't read a constant $2, header file $1 not found" -+ return 0 -+ else -+ line="$(egrep "^#define $2..*" $1)" -+ if [[ -n "$line" ]]; then -+ l_int retval=$(echo "$line" | cut -f2) -+ return $retval -+ else -+ report 'WARNING' 1234 "Can't read a constant $2 from file $1, definition of the constant not found in this file" -+ return 0 -+ fi -+ fi - } - - # function isValidName -diff --git a/tests/group.sh b/tests/group.sh -index ef24886..4c43d94 100755 ---- a/tests/group.sh -+++ b/tests/group.sh -@@ -106,7 +106,7 @@ fi - - ##### too long groupname ##### - getValueFromH '/usr/include/bits/utmp.h' 'UT_NAMESIZE' -- MaxLength=$ReturnVal -+ MaxLength=$? - length="`echo \"$groupname\" | wc -m`" - if [ $length -gt $MaxLength ] - then -diff --git a/tests/passwd.sh b/tests/passwd.sh -index 536697f..c1bf10d 100755 ---- a/tests/passwd.sh -+++ b/tests/passwd.sh -@@ -123,8 +123,8 @@ check_file_perm $group_shadow 400 root:root 1 $E_BAD_PERMISSIONS "Shadow group - - ##### too long username ##### - getValueFromH '/usr/include/bits/utmp.h' 'UT_NAMESIZE' -- MaxLength=$ReturnVal -- length="`echo \"$username\" | wc -m`" -+ MaxLength=$? -+ length=$(echo "$username" | wc -m) - if [ $length -gt $MaxLength ] - then - report 'ERROR' $E_LONG_USERNAME "\$passwd: Line \$i: User \$username has too long username." -diff --git a/tests/shadow.sh b/tests/shadow.sh -index 778f39e..48773e2 100755 ---- a/tests/shadow.sh -+++ b/tests/shadow.sh -@@ -104,7 +104,7 @@ check_file_perm $group_shadow 400 root:root 1 $E_BAD_PERMISSIONS_SHADOW "Group - - ##### too long username ##### - getValueFromH '/usr/include/bits/utmp.h' 'UT_NAMESIZE' -- MaxLength=$ReturnVal -+ MaxLength=$? - length=`echo "$username" | wc -m` - if [ $length -gt $MaxLength ] - then diff --git a/sectool-0.9.1-selinux.patch b/sectool-0.9.1-selinux.patch deleted file mode 100644 index d5ccf85..0000000 --- a/sectool-0.9.1-selinux.patch +++ /dev/null @@ -1,33 +0,0 @@ -diff --git a/tests/selinuxtest.py b/tests/selinuxtest.py -index 1e04813..e4d655b 100755 ---- a/tests/selinuxtest.py -+++ b/tests/selinuxtest.py -@@ -108,6 +108,7 @@ def bool_state_to_id(state, was = False): - - - def bools_test(): -+ report(INFO, 0, "Starting booleans change test") - old_fname = os.path.join(testenv['TDATA_DIR'], testenv['OLDBOOLS_FILE']) - bools = get_bools() - testname = testenv['NAME'] -@@ -134,16 +135,16 @@ def get_msgtype(str): - if str == 'HINT' : return HINT - - def enabled_test(): -- mode = cmd.getoutput('getenforce') -- if mode != testenv['MODE'] and mode != 'Enforcing': -+ (status, mode) = cmd.getstatusoutput('getenforce') -+ if status != 0 or (mode != testenv['MODE'] and mode != 'Enforcing'): -+ if (mode == ''): mode = 'disabled' - report(get_msgtype(testenv['DISABLED_MSGTYPE']), ID_ENABLED, "Selinux is in " + mode + " mode.") - report(HINT, ID_ENABLED, "Using Enforing mode is highly recommended. See selinux manual page for switching to Enforcing mode.") - - - def main(): -- report(INFO, 0, "Starting booleans change test") -- bools_test() - enabled_test() -+ if se.is_selinux_enabled(): bools_test() - - if __name__ == '__main__': - main() diff --git a/sectool-0.9.1-setVar.patch b/sectool-0.9.1-setVar.patch deleted file mode 100644 index aeaafad..0000000 --- a/sectool-0.9.1-setVar.patch +++ /dev/null @@ -1,46 +0,0 @@ -diff --git a/src/sectool-gui.py b/src/sectool-gui.py -index 9b6faeb..608d6af 100755 ---- a/src/sectool-gui.py -+++ b/src/sectool-gui.py -@@ -500,6 +500,7 @@ class TestHandler( Handler ): - self.environ.update( dict([ (key.upper(), self.scheduler_conf['ENVIRONMENT'][key]) for key in self.scheduler_conf['ENVIRONMENT'] ]) ) - self.environ.update( { 'TDATA_DIR_BASE' : self.environ['TDATA_DIR_BASE'] } ) - self.environ.update( { 'PATH' : self.environ['PATH'] } ) -+ self.environ.update( DEBUG='0' ) - self.suitesAll = self.ST_TestLoader.loadFromPath( self.environ["DSC_DIR"], self.environ["TESTS_DIRS"] ) - - def __remove_mark( self, string ): -@@ -511,6 +512,12 @@ class TestHandler( Handler ): - return str.group(0)[1:-1] - else: return string - -+ def set_environ( REFRESH=None, LEVEL=None, DEBUG=None ): -+ -+ if REFRESH != None: self.environ.update( REFRESH = REFRESH ) -+ if DEBUG != None: self.environ.update( DEBUG = DEBUG ) -+ if LEVEL != None: self.environ.update( LEVEL = LEVEL ) -+ - def set_default_level( self ): - - self.__formatter.select_level( self.scheduler_conf['ACTION']['LEVEL'] ) -@@ -586,6 +593,8 @@ class TestHandler( Handler ): - - if len( test_list ) == 0: return - suite = self.suitesAll.filter( self.filterTestNames, test_list=test_list ) -+ if level == -1: self.environ.update( REFRESH = '1' ) -+ else: self.environ.update( REFRESH = '0' ) - suite.updateEnviron(self.environ) - - self.threadHandler = ThreadHandler( self.__formatter, suite, test_list, level ) #: run tests in new thread -@@ -734,8 +743,9 @@ class ThreadHandler(threading.Thread, Handler): - gtk.gdk.threads_leave() - #self.__formatter.show_test_summary( test.dsc['HEADER']['NAME'] ) - # TODO: update selected test -- -+ - else: -+ - for test in self.__suite: - - if self.__stopthread.isSet(): break - diff --git a/sectool-0.9.1-zsh.patch b/sectool-0.9.1-zsh.patch deleted file mode 100644 index 52927f4..0000000 --- a/sectool-0.9.1-zsh.patch +++ /dev/null @@ -1,18 +0,0 @@ -diff --git a/tests/home_files.sh b/tests/home_files.sh -index 9faaff5..ea016f0 100755 ---- a/tests/home_files.sh -+++ b/tests/home_files.sh -@@ -80,7 +80,12 @@ NO_WRITE_FILES="\ - .viminfo \ - .xsession \ - .xinitrc \ -- .Xdefaults" -+ .Xdefaults \ -+ .zshenv \ -+ .zprofile \ -+ .zshrc \ -+ .zlogin \ -+ .zlogout" - - if (( ${REFRESH} == 1 )); then - test_exit ${E_OK} diff --git a/sectool-0.9.2-fixing.patch b/sectool-0.9.2-fixing.patch deleted file mode 100644 index e02dab8..0000000 --- a/sectool-0.9.2-fixing.patch +++ /dev/null @@ -1,1778 +0,0 @@ -diff --git a/po/fr.po b/po/fr.po -new file mode 100644 -index 0000000..92c0ec3 ---- /dev/null -+++ b/po/fr.po -@@ -0,0 +1,1670 @@ -+# French translation of SecTool. -+# Copyright (C) 2008 The SecTool copyright holder(s) -+# This file is distributed under the same license as the sectool package. -+# Corentin Perard 2008. -+# troubi , 2008. -+# -+# -+msgid "" -+msgstr "" -+"Project-Id-Version: sectool master\n" -+"Report-Msgid-Bugs-To: \n" -+"POT-Creation-Date: 2008-10-22 10:12+0200\n" -+"PO-Revision-Date: 2008-11-27 18:53+0100\n" -+"Last-Translator: Corentin Perard \n" -+"Language-Team: French \n" -+"MIME-Version: 1.0\n" -+"Content-Type: text/plain; charset=UTF-8\n" -+"Content-Transfer-Encoding: 8bit" -+ -+#: ../src/actions.py:45 -+#, python-format -+msgid "You need to be root to perform %s" -+msgstr "Vous devez être super-utilisateur pour effectuer %s" -+ -+#: ../src/actions.py:51 -+#, python-format -+msgid "Need a list of tests to do %s" -+msgstr "Requiert une liste de tests pour faire %s" -+ -+#: ../src/actions.py:56 -+#, python-format -+msgid "You need to have SELinux enabled to perform %s" -+msgstr "Vous devez avoir SELinux activé pour effectuer %s" -+ -+#: ../src/actions.py:114 -+msgid "base run class" -+msgstr "Classe d'exécution de base" -+ -+#: ../src/actions.py:169 -+#, python-format -+msgid "" -+"Test %s failed in a fatal way - returned %d. Stopping execution of the rest " -+"of the tests" -+msgstr "Le test %s a échoué de manière fatale - a retourné %d. Stoppe l'exécution du reste des tests" -+ -+#: ../src/actions.py:289 -+msgid "No matching tests to run" -+msgstr "Pas de tests correspondants à lancer" -+ -+#: ../src/actions.py:302 -+#, python-format -+msgid "Bad level specification - level must be between 1 and %d, got %d" -+msgstr "Mauvaise spécification de niveau - le niveau doit être compris entre 1 et %d, a reçu %d" -+ -+#: ../src/actions.py:332 -+#, python-format -+msgid "Could not send mail: retcode = %d" -+msgstr "N'a pas pu envoyer le mail: code de retour = %d" -+ -+#: ../src/actions.py:346 -+msgid "remove old test results" -+msgstr "Supprimer les anciens resultats de test" -+ -+#: ../src/actions.py:369 -+msgid "run test(s) at a certain level" -+msgstr "Lancer le(s) test(s) à un certain niveau" -+ -+#: ../src/actions.py:411 -+msgid "run test(s)" -+msgstr "Lancer le(s) test(s)" -+ -+#: ../src/actions.py:453 -+msgid "query info about test(s)" -+msgstr "Demander des infos sur le(s) test(s)" -+ -+#: ../src/actions.py:494 -+msgid "list tests" -+msgstr "Lister les tests" -+ -+#: ../src/actions.py:526 -+msgid "action defined in the config file" -+msgstr "Action définie dans le fichier de config" -+ -+#: ../src/actions.py:534 -+msgid "Please check if your config file contains a section 'ACTION'" -+msgstr "Veuillez vérifier si votre fichier de config contient une section 'ACTION'" -+ -+#: ../src/actions.py:593 -+msgid "Cannot use both include/exclude and test name in test list" -+msgstr "Ne peut pas utiliser à la fois inclure/exclure et le nom du test dans la liste de tests" -+ -+#: ../src/actions.py:619 -+msgid "refresh test data" -+msgstr "Raffraîchir les données du test" -+ -+#: ../src/guiOutput.py:54 ../src/guiOutput.py:199 ../src/output.py:139 -+msgid "Warning" -+msgstr "Attention" -+ -+#: ../src/guiOutput.py:55 ../src/guiOutput.py:202 ../src/output.py:142 -+msgid "Failure" -+msgstr "Echec" -+ -+#: ../src/guiOutput.py:56 ../src/guiOutput.py:198 ../src/output.py:138 -+msgid "Error" -+msgstr "Erreur" -+ -+#: ../src/guiOutput.py:57 ../src/guiOutput.py:200 ../src/output.py:140 -+msgid "Hint" -+msgstr "Conseil" -+ -+#: ../src/guiOutput.py:58 ../src/guiOutput.py:201 ../src/output.py:141 -+msgid "Info" -+msgstr "Info" -+ -+#: ../src/guiOutput.py:116 -+msgid "PASSED" -+msgstr "REUSSI" -+ -+#: ../src/guiOutput.py:117 ../src/guiOutput.py:197 ../src/output.py:136 -+msgid "WARNING" -+msgstr "ATTENTION" -+ -+#: ../src/guiOutput.py:118 ../src/guiOutput.py:197 ../src/output.py:136 -+msgid "ERROR" -+msgstr "ERREUR" -+ -+#: ../src/guiOutput.py:119 -+msgid "FAILURE !" -+msgstr "ECHEC !" -+ -+#: ../src/guiOutput.py:120 ../src/guiOutput.py:197 ../src/output.py:136 -+msgid "FATAL" -+msgstr "FATAL" -+ -+#: ../src/guiOutput.py:121 -+msgid "REFRESHED" -+msgstr "RAFFRAICHI" -+ -+#: ../src/guiOutput.py:197 ../src/output.py:136 -+msgid "PASS" -+msgstr "REUSSIR" -+ -+#: ../src/guiOutput.py:197 ../src/output.py:136 -+msgid "FAIL" -+msgstr "ECHOUER" -+ -+#: ../src/guiOutput.py:216 -+msgid "Test Name:" -+msgstr "Nom du Test:" -+ -+#: ../src/guiOutput.py:217 -+msgid "Test Result:" -+msgstr "Résultat du Test:" -+ -+#: ../src/guiOutput.py:241 -+msgid "Results saved to:" -+msgstr "Résultat sauvegardés dans:" -+ -+#: ../src/guiOutput.py:246 -+msgid "No results. Please run the test at first !" -+msgstr "Pas de résultat. Veuillez lancer un test d'abord !" -+ -+#: ../src/guiOutput.py:253 -+msgid "refreshing..." -+msgstr "actualisation..." -+ -+#: ../src/guiOutput.py:259 -+msgid "testing..." -+msgstr "test en cours..." -+ -+#. test not in testResults, but in timeResults, so the test is in the testing status right now -+#: ../src/guiOutput.py:346 ../src/guiOutput.py:372 ../src/guiOutput.py:381 -+msgid "Messages: " -+msgstr "Messages: " -+ -+#: ../src/guiOutput.py:347 ../src/guiOutput.py:373 ../src/guiOutput.py:382 -+msgid "Errors: " -+msgstr "Erreurs: " -+ -+#: ../src/guiOutput.py:348 ../src/guiOutput.py:374 ../src/guiOutput.py:383 -+msgid "Warnings: " -+msgstr "Avertissements: " -+ -+#: ../src/guiOutput.py:349 ../src/guiOutput.py:375 ../src/guiOutput.py:384 -+msgid "Hints: " -+msgstr "Conseils: " -+ -+#: ../src/guiOutput.py:350 ../src/guiOutput.py:376 ../src/guiOutput.py:385 -+msgid "Info messages: " -+msgstr "Messages d'info: " -+ -+#: ../src/guiOutput.py:352 -+msgid "Time the test was running: " -+msgstr "Durée d'exécution du test: " -+ -+#: ../src/guiOutput.py:356 -+msgid "" -+"Test failed: User pressed stop button. Please restart this test to get all " -+"results." -+msgstr "Test échoué: L'utilisateur a appuyé sur stop. Veuillez relancer ce test pour obtenir tous les résultats." -+ -+#: ../src/guiOutput.py:378 ../src/guiOutput.py:387 -+msgid "Summary of time: " -+msgstr "Résumé du temps: " -+ -+#: ../src/guiOutput.py:387 -+msgid "Unknown" -+msgstr "Inconnu" -+ -+#: ../src/guiOutput.py:410 ../src/guiOutput.py:428 ../src/guiRender.py:1167 -+msgid "All" -+msgstr "Tout" -+ -+#: ../src/guiOutput.py:428 -+msgid "Show all test results" -+msgstr "Montrer tous les résultats du test" -+ -+#: ../src/guiOutput.py:445 -+msgid "Name: " -+msgstr "Nom: " -+ -+#: ../src/guiOutput.py:445 -+msgid "Author: " -+msgstr "Auteur: " -+ -+#: ../src/guiOutput.py:465 ../src/guiRender.py:1172 -+msgid "Naive" -+msgstr "Naif" -+ -+#: ../src/guiOutput.py:465 ../src/guiRender.py:1173 -+msgid "Desktop" -+msgstr "Bureau" -+ -+#: ../src/guiOutput.py:465 ../src/guiRender.py:1174 -+msgid "Network" -+msgstr "Réseau" -+ -+#: ../src/guiOutput.py:465 ../src/guiRender.py:1175 -+msgid "Server" -+msgstr "Serveur" -+ -+#: ../src/guiOutput.py:465 ../src/guiRender.py:1176 -+msgid "Paranoid" -+msgstr "Paranoïaque" -+ -+#: ../src/guiOutput.py:480 -+msgid "Please wait, executing test " -+msgstr "Veuillez patienter, test en cours " -+ -+#: ../src/guiOutput.py:565 -+msgid "" -+"Configuration of test levels has changed.\n" -+"\n" -+"Do you want to save new configuration?" -+msgstr "" -+ -+#: ../src/guiRender.py:675 ../src/guiRender.py:1447 -+msgid "Wrong call of appendMessage() function: missing gtk.TreeModel" -+msgstr "" -+ -+#: ../src/guiRender.py:677 ../src/guiRender.py:1449 -+msgid "Wrong call of appendMessage() function: missing message string" -+msgstr "" -+ -+#: ../src/guiRender.py:1082 -+msgid "Overview" -+msgstr "Aperçu" -+ -+#: ../src/guiRender.py:1083 -+msgid "Test Results" -+msgstr "Résultats du Test" -+ -+#: ../src/guiRender.py:1101 -+msgid "Test info" -+msgstr "Infos sur le test" -+ -+#: ../src/guiRender.py:1110 -+msgid "Test groups" -+msgstr "Groupes de test" -+ -+#: ../src/guiRender.py:1119 -+msgid "Test is defined in levels" -+msgstr "Le test est défini dans les niveaux" -+ -+#: ../src/guiRender.py:1128 -+msgid "Test description" -+msgstr "Description du test" -+ -+#: ../src/guiRender.py:1179 -+msgid "Choose a group to filter tests" -+msgstr "" -+ -+#: ../src/guiRender.py:1180 -+msgid "Choose a level to run the test" -+msgstr "" -+ -+#: ../src/guiRender.py:1275 -+msgid "Summary" -+msgstr "Résumé" -+ -+#: ../src/guiRender.py:1307 ../src/guiRender.py:1428 -+msgid "Test" -+msgstr "Test" -+ -+#: ../src/guiRender.py:1308 -+msgid "Result" -+msgstr "Résultat" -+ -+#: ../src/guiRender.py:1371 ../src/guiRender.py:1373 -+msgid "Test does not meet the requirements: " -+msgstr "" -+ -+#: ../src/guiRender.py:1384 -+msgid "All tests done. " -+msgstr "Tous les tests finis. " -+ -+#: ../src/guiRender.py:1426 -+msgid "Mark" -+msgstr "Note" -+ -+#: ../src/guiRender.py:1427 -+msgid "Severity" -+msgstr "Sévérité" -+ -+#: ../src/guiRender.py:1429 -+msgid "Num" -+msgstr "Num" -+ -+#: ../src/guiRender.py:1430 ../src/output.py:284 ../src/output.py:334 -+msgid "Description" -+msgstr "Description" -+ -+#. Root menu "FILE" -+#: ../src/guiRender.py:1524 ../src/guiRender.py:1652 -+msgid "Start the selected test" -+msgstr "" -+ -+#: ../src/guiRender.py:1525 ../src/guiRender.py:1653 -+msgid "_Start the selected test" -+msgstr "" -+ -+#: ../src/guiRender.py:1528 ../src/guiRender.py:1656 -+msgid "Start the test" -+msgstr "Lancer le test" -+ -+#: ../src/guiRender.py:1529 ../src/guiRender.py:1657 -+msgid "Start checked tests in selected level" -+msgstr "" -+ -+#: ../src/guiRender.py:1530 ../src/guiRender.py:1658 -+msgid "_Start checked tests in selected level" -+msgstr "" -+ -+#: ../src/guiRender.py:1533 ../src/guiRender.py:1661 -+msgid "Start the whole level" -+msgstr "Lancer le niveau complet" -+ -+#: ../src/guiRender.py:1534 -+msgid "Load default level configuration" -+msgstr "" -+ -+#: ../src/guiRender.py:1535 -+msgid "_Load default level configuration" -+msgstr "" -+ -+#: ../src/guiRender.py:1538 -+msgid "Load default configuration for levels" -+msgstr "" -+ -+#: ../src/guiRender.py:1539 -+msgid "Clear and refresh test data" -+msgstr "" -+ -+#: ../src/guiRender.py:1540 -+msgid "_Clear & refresh test data" -+msgstr "" -+ -+#: ../src/guiRender.py:1543 ../src/guiRender.py:1756 -+msgid "Removes any data owned by a test and runs it just to recreate them." -+msgstr "" -+ -+#: ../src/guiRender.py:1546 -+msgid "Root Menu" -+msgstr "Menu Racine" -+ -+#: ../src/guiRender.py:1546 -+msgid "_Root Menu" -+msgstr "_Menu Racine" -+ -+#: ../src/guiRender.py:1662 -+msgid "Start" -+msgstr "Démarrer" -+ -+#: ../src/guiRender.py:1662 -+msgid "_Start" -+msgstr "_Démarrer" -+ -+#. --- -+#: ../src/guiRender.py:1665 ../src/guiRender.py:1760 -+msgid "Stop" -+msgstr "Stop" -+ -+#: ../src/guiRender.py:1665 -+msgid "S_top" -+msgstr "S_top" -+ -+#: ../src/guiRender.py:1668 ../src/guiRender.py:1763 -+msgid "Quit" -+msgstr "Quitter" -+ -+#: ../src/guiRender.py:1668 -+msgid "_Quit" -+msgstr "_Quitter" -+ -+#: ../src/guiRender.py:1670 -+msgid "Quit program" -+msgstr "Quitter le programme" -+ -+#: ../src/guiRender.py:1671 -+msgid "File" -+msgstr "Fichier" -+ -+#: ../src/guiRender.py:1671 -+msgid "_File" -+msgstr "_Fichier" -+ -+#. Root menu Edit -+#. self.renderRootMenuItem( _("Edit"), _("_Edit"), menuBar, None ) -+#. Root menu View -+#: ../src/guiRender.py:1676 -+msgid "Show info messages" -+msgstr "" -+ -+#: ../src/guiRender.py:1677 ../src/guiRender.py:1762 -+msgid "Show hints" -+msgstr "Montrer les conseils" -+ -+#: ../src/guiRender.py:1678 -+msgid "View" -+msgstr "Affichage" -+ -+#: ../src/guiRender.py:1678 -+msgid "_View" -+msgstr "_Affichage" -+ -+#. Root menu Tools -+#. self.renderRootMenuItem( _("Tools"), _("_Tools"), menuBar, None ) -+#. Root menu Help -+#: ../src/guiRender.py:1682 -+msgid "About" -+msgstr "A propos" -+ -+#: ../src/guiRender.py:1682 -+msgid "_About" -+msgstr "A _propos" -+ -+#: ../src/guiRender.py:1684 -+msgid "About Dialog" -+msgstr "A propos de SecTool" -+ -+#: ../src/guiRender.py:1685 -+msgid "Help" -+msgstr "Aide" -+ -+#: ../src/guiRender.py:1685 -+msgid "_Help" -+msgstr "Aid_e" -+ -+#. --- -+#: ../src/guiRender.py:1730 ../src/guiRender.py:1734 -+msgid "Start level" -+msgstr "Lancer le niveau" -+ -+#: ../src/guiRender.py:1735 -+msgid "Start selected _level" -+msgstr "Lancer le _niveau sélectionné" -+ -+#: ../src/guiRender.py:1737 -+msgid "Start whole level" -+msgstr "" -+ -+#: ../src/guiRender.py:1738 -+msgid "Start test" -+msgstr "Lancer le test" -+ -+#: ../src/guiRender.py:1739 -+msgid "Start selected _test" -+msgstr "Lancer le _test sélectionné" -+ -+#: ../src/guiRender.py:1741 -+msgid "Start choosen test" -+msgstr "Lancer le test choisi" -+ -+#. --- -+#: ../src/guiRender.py:1745 -+msgid "Clear tests" -+msgstr "Effacer les tests" -+ -+#: ../src/guiRender.py:1749 -+msgid "Clear and refresh all tests" -+msgstr "" -+ -+#: ../src/guiRender.py:1750 -+msgid "Clear & refresh all tests" -+msgstr "" -+ -+#: ../src/guiRender.py:1752 -+msgid "Removes all data for all tests" -+msgstr "" -+ -+#: ../src/guiRender.py:1753 -+msgid "Clear and refresh selected test" -+msgstr "" -+ -+#: ../src/guiRender.py:1754 -+msgid "Clear & refresh selected test" -+msgstr "" -+ -+#: ../src/guiRender.py:1761 -+msgid "Show info" -+msgstr "Montrer les infos" -+ -+#: ../src/guiRender.py:1764 -+msgid "Save..." -+msgstr "Enregistrer..." -+ -+#: ../src/mailoutput.py:165 -+msgid "" -+"Neither TARGET=LOCAL nor TARGET=SMTP found in config file (section[MAIL]" -+msgstr "" -+ -+#: ../src/output.py:136 -+msgid "INVALID" -+msgstr "INVALIDE" -+ -+#: ../src/output.py:169 -+#, python-format -+msgid "" -+"%s\n" -+"\tThe test did not change its result" -+msgstr "" -+ -+#: ../src/output.py:200 -+#, python-format -+msgid "\t%s:%s\n" -+msgstr "" -+ -+#: ../src/output.py:203 -+#, python-format -+msgid "\t%s:%s (Changed from: %s)\n" -+msgstr "" -+ -+#: ../src/output.py:215 -+#, python-format -+msgid "%s ->" -+msgstr "" -+ -+#: ../src/output.py:224 -+#, python-format -+msgid " %s: %s\n" -+msgstr "" -+ -+#: ../src/output.py:268 -+msgid "\tFailure" -+msgstr "" -+ -+#: ../src/output.py:283 ../src/output.py:330 -+msgid "Name" -+msgstr "Nom" -+ -+#: ../src/output.py:285 ../src/output.py:333 -+msgid "Levels" -+msgstr "Niveaux" -+ -+#: ../src/output.py:322 -+msgid "" -+"\n" -+"An asterisk (*) in the Levels column denotes test that can't be run due to " -+"missing requirements" -+msgstr "" -+ -+#: ../src/output.py:331 -+msgid "Script name" -+msgstr "Nom du script" -+ -+#: ../src/output.py:332 -+msgid "Groups" -+msgstr "Groupes" -+ -+#: ../src/output.py:346 -+msgid "Run report" -+msgstr "Lancer un rapport" -+ -+#: ../src/output.py:347 -+msgid "Total tests run" -+msgstr "Total des tests lancés" -+ -+#: ../src/output.py:348 -+msgid "Passed" -+msgstr "Réussi" -+ -+#: ../src/output.py:349 -+msgid "Warnings" -+msgstr "Avertissements" -+ -+#: ../src/output.py:350 -+msgid "Errors" -+msgstr "Erreurs" -+ -+#: ../src/output.py:351 -+msgid "Invalid runs" -+msgstr "" -+ -+#: ../src/output.py:352 -+msgid "Failures" -+msgstr "Echecs" -+ -+#: ../src/output.py:353 -+msgid "Fatal failures" -+msgstr "Erreurs fatales" -+ -+#: ../src/sectool-gui.py:80 -+msgid "Security Tool GUI" -+msgstr "" -+ -+#: ../src/sectool-gui.py:86 -+msgid "Security Tool" -+msgstr "" -+ -+#: ../src/sectool-gui.py:259 -+msgid "Cancelling, please wait..." -+msgstr "" -+ -+#: ../src/sectool-gui.py:291 -+msgid "Fedora Security Tool" -+msgstr "" -+ -+#: ../src/sectool-gui.py:292 -+msgid "Copyright by Red Hat " -+msgstr "" -+ -+#: ../src/sectool-gui.py:293 -+msgid "An auditing tool for Fedora and Red Hat systems only." -+msgstr "" -+ -+#: ../src/sectool-gui.py:294 -+msgid "Version" -+msgstr "Version" -+ -+#: ../src/sectool-gui.py:700 -+msgid "Initializing.." -+msgstr "" -+ -+#. : ^C .. what a noob ?!? -+#: ../src/sectool-gui.py:806 ../src/sectool.py:340 -+msgid "Exiting on user request.\n" -+msgstr "" -+ -+#: ../src/sectool.py:99 -+msgid "Specify a configuration file" -+msgstr "" -+ -+#: ../src/sectool.py:103 -+msgid "Debug mode" -+msgstr "Mode de débogage" -+ -+#: ../src/sectool.py:107 -+msgid "" -+"Print traceback for development purposes on encountering\n" -+"an error that is otherwise handled gracefully" -+msgstr "" -+ -+#: ../src/sectool.py:112 -+msgid "Display hints when available" -+msgstr "" -+ -+#: ../src/sectool.py:116 -+msgid "Send email report" -+msgstr "" -+ -+#: ../src/sectool.py:121 -+msgid "Filter tests by group" -+msgstr "" -+ -+#: ../src/sectool.py:125 -+msgid "Display only diff against previous run (if available)" -+msgstr "" -+ -+#: ../src/sectool.py:130 -+msgid "" -+"If running a level, include these tests that may be not defined in that " -+"level." -+msgstr "" -+ -+#: ../src/sectool.py:135 -+msgid "" -+"If running a level, exclude these tests that may be not defined in that " -+"level." -+msgstr "" -+ -+#: ../src/sectool.py:139 -+msgid "Print a report about the run after it finishes" -+msgstr "" -+ -+#: ../src/sectool.py:148 -+msgid "List tests and their level configuration" -+msgstr "" -+ -+#: ../src/sectool.py:153 -+msgid "Query info about a test" -+msgstr "" -+ -+#: ../src/sectool.py:158 -+msgid "" -+"Run all tests in a collection at a certain level.\n" -+"The level can be specified either as an integer (1-5) or string nickname\n" -+"(Naive, Desktop, Network, Server, Paranoid). See sectool(8) for more details." -+msgstr "" -+ -+#: ../src/sectool.py:165 -+msgid "Run selected tests" -+msgstr "" -+ -+#: ../src/sectool.py:170 -+msgid "Perform the action defined in the config file" -+msgstr "" -+ -+#: ../src/sectool.py:175 -+msgid "Cleans the XML cache which stores previous test results" -+msgstr "" -+ -+#: ../src/sectool.py:180 -+msgid "Removes any data owned by a test and runs it just to recreate them" -+msgstr "" -+ -+#: ../src/sectool.py:204 -+#, python-format -+msgid "Unknown action %s" -+msgstr "" -+ -+#: ../src/sectool.py:220 ../src/sectool.py:222 -+msgid "" -+"Bad level specification - use --level where is between 1 and 5" -+msgstr "" -+ -+#: ../src/sectool.py:268 -+msgid "Must select at least one action" -+msgstr "" -+ -+#: ../src/sectool.py:279 -+msgid "Only one action can be selected at a time" -+msgstr "" -+ -+#: ../src/sectool.py:308 -+#, python-format -+msgid "Could not instantiate action based upon %s" -+msgstr "" -+ -+#: ../src/tuierrors.py:13 -+#, python-format -+msgid "Error: %s" -+msgstr "" -+ -+#: ../src/tuierrors.py:31 -+#, python-format -+msgid "%s" -+msgstr "" -+ -+#: ../src/tuierrors.py:38 -+#, python-format -+msgid "SecTool Error: %s" -+msgstr "" -+ -+#: ../tests/aliases.sh:71 ../tests/aliases.sh:105 -+msgid "Please unset it the group writing bit" -+msgstr "" -+ -+#: ../tests/aliases.sh:78 ../tests/aliases.sh:112 -+msgid "Please unset it the world writing bit" -+msgstr "" -+ -+#: ../tests/aliases.sh:85 ../tests/aliases.sh:119 -+msgid "Please chown this file to root:root" -+msgstr "" -+ -+#. ############################ DEBUG -+#: ../tests/bash_defs_debug.sh:87 ../tests/bash_defs.sh:41 -+msgid "--" -+msgstr "" -+ -+#: ../tests/disc_usage.sh:39 -+#, sh-format -+msgid "" -+"Device $device mounted to $directory is full! There is $percent_used used!" -+msgstr "" -+ -+#: ../tests/disc_usage.sh:40 ../tests/disc_usage.sh:43 -+msgid "Please backup and delete unused files from this directory" -+msgstr "" -+ -+#: ../tests/disc_usage.sh:42 -+#, sh-format -+msgid "" -+"Device $device mounted to $directory is going to be full! There is " -+"$percent_used used!" -+msgstr "" -+ -+#: ../tests/exec-shield.sh:15 -+msgid "Exec-shield is disabled." -+msgstr "" -+ -+#: ../tests/exec-shield.sh:16 ../tests/exec-shield.sh:23 -+msgid "You can use \"sysctl\" command to turn it on." -+msgstr "" -+ -+#: ../tests/exec-shield.sh:22 -+msgid "Virtual addresses randomization is disabled." -+msgstr "" -+ -+#: ../tests/firewall.sh:701 -+msgid "IPv4 forwarding is ENABLED." -+msgstr "" -+ -+#: ../tests/firewall.sh:708 -+msgid "IPv4 source routing is ENABLED on ALL interfaces!" -+msgstr "" -+ -+#: ../tests/firewall.sh:714 -+msgid "IPv4 Source routing is ENABLED as default!" -+msgstr "" -+ -+#: ../tests/firewall.sh:819 -+msgid "IPv6 forwarding is ENABLED." -+msgstr "" -+ -+#: ../tests/group.sh:52 ../tests/home_files.sh:92 ../tests/passwd.sh:65 -+#: ../tests/shadow.sh:52 -+msgid "You have to be logged as root to run this test!" -+msgstr "" -+ -+#: ../tests/group.sh:72 -+#, sh-format -+msgid "$group: Line $i is empty" -+msgstr "" -+ -+#: ../tests/group.sh:73 ../tests/passwd.sh:87 ../tests/shadow.sh:71 -+msgid "Please delete this line." -+msgstr "" -+ -+#: ../tests/group.sh:81 -+#, sh-format -+msgid "$group: Line $i has wrong number of fields" -+msgstr "" -+ -+#: ../tests/group.sh:82 -+msgid "Please see 'man group' and correct this line." -+msgstr "" -+ -+#: ../tests/group.sh:95 -+#, sh-format -+msgid "$group: Line $i: missing groupname!" -+msgstr "" -+ -+#: ../tests/group.sh:96 -+msgid "" -+"Check this line, fill in first item (groupname), or delete the whole line." -+msgstr "" -+ -+#: ../tests/group.sh:103 -+#, sh-format -+msgid "$group: Line $i: Groupname $groupname contains disallowed characters." -+msgstr "" -+ -+#: ../tests/group.sh:104 -+#, sh-format -+msgid "" -+"Check this line and rename the groupname to contain lowercase letters only. " -+"Don't forget to update the $group_shadow file!" -+msgstr "" -+ -+#: ../tests/group.sh:113 -+#, sh-format -+msgid "$group: Line $i: Group $groupname has too long name." -+msgstr "" -+ -+#: ../tests/group.sh:114 -+#, sh-format -+msgid "" -+"Check this line and rename the name of the group to be shorter than " -+"$MaxLength characters. Don't forget to update the $group_shadow file" -+msgstr "" -+ -+#: ../tests/group.sh:120 -+#, sh-format -+msgid "" -+"$group: Line $i: Group $groupname has a password, but it is not shadowed" -+msgstr "" -+ -+#: ../tests/group.sh:121 -+#, sh-format -+msgid "" -+"Please use grpconv utility for moving group passwords from $group to " -+"$group_shadow" -+msgstr "" -+ -+#: ../tests/group.sh:127 -+#, sh-format -+msgid "$group: Line $i: Group ID of the group $groupname is not a valid number" -+msgstr "" -+ -+#: ../tests/group.sh:128 -+msgid "Please correct the group ID." -+msgstr "" -+ -+#: ../tests/group.sh:135 -+#, sh-format -+msgid "$group: Line $i: Group $groupname has GID out of range" -+msgstr "" -+ -+#: ../tests/group.sh:136 -+#, sh-format -+msgid "Change GID of this group to be in the range <0, $GID_MAX_VALUE>" -+msgstr "" -+ -+#. delete last coma -+#: ../tests/group.sh:151 -+#, sh-format -+msgid "Duplicate group name '$groupname' (lines $lines)" -+msgstr "" -+ -+#: ../tests/group.sh:152 -+msgid "" -+"Please change groupnames on these lines to be different or delete duplicate " -+"records" -+msgstr "" -+ -+#. delete last coma -+#: ../tests/group.sh:163 -+#, sh-format -+msgid "Duplicate group IDs '$groupID' (lines $lines)" -+msgstr "" -+ -+#: ../tests/group.sh:164 -+msgid "" -+"Please change IDs on these lines to be different or delete duplicate records" -+msgstr "" -+ -+#: ../tests/group.sh:172 -+#, sh-format -+msgid "User root has GID $root_gid, but should have 0" -+msgstr "" -+ -+#: ../tests/group.sh:173 -+msgid "Change root's GID to 0" -+msgstr "" -+ -+#: ../tests/home_dirs.sh:106 ../tests/openssh.sh:576 ../tests/routing.sh:27 -+msgid "This is a first run of the test. Some parts of audit are skipped." -+msgstr "" -+ -+#: ../tests/home_files.sh:103 -+#, sh-format -+msgid "" -+"Could not detect users' home directory in $useradd, the default will be used" -+msgstr "" -+ -+#: ../tests/home_files.sh:161 -+#, sh-format -+msgid "User \"$line_username\" can't read his $tested_file!" -+msgstr "" -+ -+#: ../tests/home_files.sh:167 -+#, sh-format -+msgid "" -+"User \"$line_username\" allows users from his group to read his $tested_file!" -+msgstr "" -+ -+#: ../tests/home_files.sh:171 -+#, sh-format -+msgid "" -+"User \"$line_username\" allows users from his group to write to his " -+"$tested_file!" -+msgstr "" -+ -+#: ../tests/home_files.sh:177 -+#, sh-format -+msgid "User \"$line_username\" allows other users to read his $tested_file!" -+msgstr "" -+ -+#: ../tests/home_files.sh:181 -+#, sh-format -+msgid "" -+"User \"$line_username\" allows other users to write to his $tested_file!" -+msgstr "" -+ -+#: ../tests/logfiles.sh:37 -+#, sh-format -+msgid "File $file doesn't exist!" -+msgstr "" -+ -+#: ../tests/logfiles.sh:38 -+msgid "Please create this file." -+msgstr "" -+ -+#: ../tests/logfiles.sh:43 -+#, sh-format -+msgid "File $file has wrong owner. The correct owner is $owner." -+msgstr "" -+ -+#: ../tests/logfiles.sh:44 -+msgid "Please change the owner of this file to the recommended one." -+msgstr "" -+ -+#: ../tests/logfiles.sh:50 -+#, sh-format -+msgid "File $file has wrong group. The correct group is $group." -+msgstr "" -+ -+#: ../tests/logfiles.sh:51 -+msgid "Please change the group of this file to the recommended one." -+msgstr "" -+ -+#: ../tests/logfiles.sh:58 -+#, sh-format -+msgid "File $file has wrong permssions! The correct permissions are $perm." -+msgstr "" -+ -+#: ../tests/logfiles.sh:59 -+msgid "Please change the permissions of this file to the recommended value." -+msgstr "" -+ -+#: ../tests/netserv.sh:102 ../tests/openssh.sh:159 ../tests/openvpn.sh:100 -+msgid "Created new SHA256 list." -+msgstr "" -+ -+#: ../tests/netserv.sh:105 ../tests/openssh.sh:164 ../tests/openvpn.sh:103 -+msgid "SHA256 list not found." -+msgstr "" -+ -+#: ../tests/netserv.sh:323 -+msgid "The origin of this file is unknown." -+msgstr "" -+ -+#: ../tests/netserv.sh:343 -+msgid "Update your system to get rid of this message." -+msgstr "" -+ -+#: ../tests/nfs.sh:28 -+#, sh-format -+msgid "File $EXPORTS was not found!" -+msgstr "" -+ -+#: ../tests/openssh.sh:267 -+msgid "Remove all unnecessary files from this directory." -+msgstr "" -+ -+#: ../tests/openssh.sh:283 -+msgid "SSHv1 is enabled. Using of this version is DEPRECATED." -+msgstr "" -+ -+#: ../tests/openssh.sh:375 -+msgid "Remote root login IS ENABLED." -+msgstr "" -+ -+#: ../tests/openssh.sh:379 -+msgid "Remote root login IS ENABLED only with publickey authentication." -+msgstr "" -+ -+#: ../tests/openssh.sh:382 -+msgid "Remote root login IS ENABLED, only forced commands allowed." -+msgstr "" -+ -+#: ../tests/openssh.sh:386 -+msgid "Remote root login IS NOT EXPLICITLY DISABLED." -+msgstr "" -+ -+#: ../tests/openssh.sh:387 -+msgid "" -+"The default value is not known. If you don't want to allow remote root " -+"login, then you should disable it in your sshd_config." -+msgstr "" -+ -+#: ../tests/openssh.sh:394 -+msgid "" -+"Remote access IS NOT restricted with the AllowGroups nor the AllowUsers " -+"directive" -+msgstr "" -+ -+#: ../tests/openssh.sh:395 -+msgid "" -+"It is recommended to resctrict remote login only to users that needs it or " -+"create a special group for this purpose." -+msgstr "" -+ -+#: ../tests/openssh.sh:401 -+msgid "Challenge-response and PAM authentication ARE DISABLED." -+msgstr "" -+ -+#: ../tests/openssh.sh:405 -+msgid "Processing of user's enviroment IS ENABLED." -+msgstr "" -+ -+#: ../tests/openssh.sh:409 -+msgid "StrictModes DISABLED." -+msgstr "" -+ -+#: ../tests/openssh.sh:413 -+msgid "Privilege separation IS DISABLED." -+msgstr "" -+ -+#: ../tests/openssh.sh:422 -+msgid "ClientAliveCountMax is set to 0 (no limit)" -+msgstr "" -+ -+#: ../tests/openssh.sh:424 -+msgid "ClientAliveCountMax is greater than 6" -+msgstr "" -+ -+#: ../tests/openssh.sh:432 -+msgid "ClientAliveInterval set to 0 (no limit)" -+msgstr "" -+ -+#: ../tests/openssh.sh:434 -+msgid "ClientAliveInterval is higher than 600 seconds" -+msgstr "" -+ -+#: ../tests/pam.sh:23 -+msgid "New passwords for system services aren't checked with cracklib." -+msgstr "" -+ -+#: ../tests/pam.sh:30 -+msgid "" -+"Account lockout after repetitive failed login attempts is not configured." -+msgstr "" -+ -+#: ../tests/passwd.sh:86 -+#, sh-format -+msgid "$passwd: Line $i is empty" -+msgstr "" -+ -+#: ../tests/passwd.sh:95 -+#, sh-format -+msgid "$passwd: Line $i has wrong number of fields" -+msgstr "" -+ -+#: ../tests/passwd.sh:96 -+msgid "Please see 'man 5 passwd' and correct this line." -+msgstr "" -+ -+#: ../tests/passwd.sh:112 -+#, sh-format -+msgid "$passwd: Line $i: missing username!" -+msgstr "" -+ -+#: ../tests/passwd.sh:113 -+msgid "" -+"Check this line, fill in first item (username), or delete the whole line." -+msgstr "" -+ -+#: ../tests/passwd.sh:120 -+#, sh-format -+msgid "" -+"$passwd: Line $i: User $username contains disallowed characters in his login." -+msgstr "" -+ -+#: ../tests/passwd.sh:121 ../tests/shadow.sh:102 -+msgid "" -+"Check this line and rename user's login to contain lowercase letters only." -+msgstr "" -+ -+#: ../tests/passwd.sh:130 -+#, sh-format -+msgid "$passwd: Line $i: User $username has too long username." -+msgstr "" -+ -+#: ../tests/passwd.sh:131 -+#, sh-format -+msgid "" -+"Check this line and rename user's login to be shorter than $MaxLength " -+"characters" -+msgstr "" -+ -+#: ../tests/passwd.sh:137 -+#, sh-format -+msgid "$passwd: Line $i: User $username has no password!" -+msgstr "" -+ -+#: ../tests/passwd.sh:138 -+msgid "Please use 'passwd' utility immediately to set his password!" -+msgstr "" -+ -+#: ../tests/passwd.sh:144 -+#, sh-format -+msgid "$passwd: Line $i: User ${username}'s password is not shadowed" -+msgstr "" -+ -+#: ../tests/passwd.sh:145 -+#, sh-format -+msgid "Please use pwconv utility for moving passwords from $passwd to $shadow" -+msgstr "" -+ -+#: ../tests/passwd.sh:152 -+#, sh-format -+msgid "$passwd: Line $i: User ID of user $username is not a valid number" -+msgstr "" -+ -+#: ../tests/passwd.sh:153 -+#, sh-format -+msgid "Please correct the user ID in $passwd." -+msgstr "" -+ -+#: ../tests/passwd.sh:159 -+#, sh-format -+msgid "$passwd: Line $i: Group ID of user $username is not a valid number" -+msgstr "" -+ -+#: ../tests/passwd.sh:160 -+#, sh-format -+msgid "Please correct the group ID in $passwd." -+msgstr "" -+ -+#: ../tests/passwd.sh:167 -+#, sh-format -+msgid "$passwd: Line $i: User $username has UID out of range" -+msgstr "" -+ -+#: ../tests/passwd.sh:168 -+#, sh-format -+msgid "" -+"Change UID of this user to be in the range <$UID_MIN_VALUE, $UID_MAX_VALUE> " -+"(ordinary users) or less than $UID_MIN_VALUE (daemons)." -+msgstr "" -+ -+#: ../tests/passwd.sh:173 -+#, sh-format -+msgid "$passwd: Line $i: User $username has GID out of range" -+msgstr "" -+ -+#: ../tests/passwd.sh:174 -+#, sh-format -+msgid "" -+"Change GID of this user to be in the range <$GID_MIN_VALUE, $GID_MAX_VALUE> " -+"(ordinary users) or less than $GID_MIN_VALUE (daemons)." -+msgstr "" -+ -+#: ../tests/passwd.sh:182 -+#, sh-format -+msgid "" -+"$passwd: Line $i: User $username has UID 0, but his login is not 'root'!" -+msgstr "" -+ -+#: ../tests/passwd.sh:183 -+#, sh-format -+msgid "" -+"If there are more users with UID 0 in $passwd (you should see them on next " -+"lines), delete all but the first. Then set his name to root." -+msgstr "" -+ -+#: ../tests/passwd.sh:189 -+#, sh-format -+msgid "$passwd: Line $i: User $username has UID 1, but his login is not 'bin'!" -+msgstr "" -+ -+#: ../tests/passwd.sh:190 -+#, sh-format -+msgid "" -+"If there are more users with UID 1 in $passwd (you should see them on next " -+"lines), delete all but the first. Then set his name to 'bin'." -+msgstr "" -+ -+#: ../tests/passwd.sh:197 -+#, sh-format -+msgid "" -+"$passwd: Line $i: User $username has GID 0, but his login is not 'root'!" -+msgstr "" -+ -+#: ../tests/passwd.sh:198 -+#, sh-format -+msgid "" -+"If there are more users with GID 0 in $passwd (you should see them on next " -+"lines), delete all but the first. Then set his name to root." -+msgstr "" -+ -+#: ../tests/passwd.sh:204 -+#, sh-format -+msgid "$passwd: Line $i: User $username has GID 1, but his login is not 'bin'!" -+msgstr "" -+ -+#: ../tests/passwd.sh:205 -+#, sh-format -+msgid "" -+"If there are more users with GID 1 in $passwd (you should see them on next " -+"lines), delete all but the first. Then set his name to 'bin'." -+msgstr "" -+ -+#: ../tests/passwd.sh:211 -+#, sh-format -+msgid "$passwd: Line $i: User $username has a negative user ID" -+msgstr "" -+ -+#: ../tests/passwd.sh:212 -+#, sh-format -+msgid "" -+"Set his UID to non-negative and not yet used value in the range <" -+"$UID_MIN_VALUE,$UID_MAX_VALUE> (ordinary users) or less than $UID_MIN_VALUE " -+"(daemons)." -+msgstr "" -+ -+#: ../tests/passwd.sh:218 -+#, sh-format -+msgid "$passwd: Line $i: User $username has a negative group ID" -+msgstr "" -+ -+#: ../tests/passwd.sh:219 -+#, sh-format -+msgid "" -+"Set his GID to non-negative and not yet used value in the range <" -+"$GID_MIN_VALUE,$GID_MAX_VALUE> (ordinary users) or less than $GID_MIN_VAL " -+"(daemons)." -+msgstr "" -+ -+#: ../tests/passwd.sh:238 -+#, sh-format -+msgid "$passwd: Line $i: User $username has strange shell $shell" -+msgstr "" -+ -+#: ../tests/passwd.sh:239 -+msgid "" -+"Set last field on this line to /bin/bash, or add the shell to /etc/shells" -+msgstr "" -+ -+#: ../tests/passwd.sh:281 -+#, sh-format -+msgid "" -+"User $user (passwd line $line) has the same UID ($uid) as user " -+"$prev_username (passwd line $prev_line)" -+msgstr "" -+ -+#: ../tests/passwd.sh:282 -+msgid "" -+"Please change UID of this user and don't forget to chown his home directory" -+msgstr "" -+ -+#. delete last coma -+#: ../tests/passwd.sh:297 -+#, sh-format -+msgid "Duplicate login '$user' ($passwd lines $lines)" -+msgstr "" -+ -+#: ../tests/passwd.sh:298 ../tests/shadow.sh:136 -+msgid "" -+"Please change usernames on these lines to be different or delete duplicate " -+"records" -+msgstr "" -+ -+#: ../tests/passwd.sh:306 -+#, sh-format -+msgid "User root has UID $root_uid, but should have 0" -+msgstr "" -+ -+#: ../tests/passwd.sh:307 -+msgid "Change root's UID to 0" -+msgstr "" -+ -+#: ../tests/path.sh:70 -+#, sh-format -+msgid "" -+"Path variable contains directory $dir, which doesn't exist or is not an " -+"directory." -+msgstr "" -+ -+#: ../tests/path.sh:71 -+msgid "Please look in your startup scripts and remove this setting" -+msgstr "" -+ -+#: ../tests/path.sh:76 -+#, sh-format -+msgid "Path variable contains directory $dir, which is group-writable" -+msgstr "" -+ -+#: ../tests/path.sh:77 ../tests/path.sh:83 -+msgid "" -+"Please look in your startup scripts and remove this setting. This directory " -+"can be used to make you execute a fake (and dangerous) binary file, i.e. ls" -+msgstr "" -+ -+#: ../tests/path.sh:82 -+#, sh-format -+msgid "Path variable contains directory $dir, which is world-writable" -+msgstr "" -+ -+#: ../tests/path.sh:93 -+#, sh-format -+msgid "" -+"File ${file}, which is placed in PATH directory ${dir}, is writable NOT only " -+"by his owner! The correct permissions should be 755." -+msgstr "" -+ -+#: ../tests/path.sh:94 -+msgid "" -+"This is VERY dangerous, since one can change contents of this executable. " -+"Please set permissions of this file to the recommended one immediately!" -+msgstr "" -+ -+#: ../tests/path.sh:106 -+#, sh-format -+msgid "" -+"File ${file}, which is placed in PATH directory ${dir}, is owned by someone " -+"else than by root!" -+msgstr "" -+ -+#: ../tests/path.sh:107 -+msgid "" -+"This is VERY dangerous, since one can change contents of this executable. " -+"Please change the owner and group of this file to 'root' immediately!" -+msgstr "" -+ -+#: ../tests/permissions.sh:70 -+#, sh-format -+msgid "Directory $dir doesn't exist!" -+msgstr "" -+ -+#: ../tests/permissions.sh:71 -+msgid "Please create this directory." -+msgstr "" -+ -+#: ../tests/permissions.sh:77 -+#, sh-format -+msgid "Directory $dir has wrong owner" -+msgstr "" -+ -+#: ../tests/permissions.sh:78 -+msgid "Please change owner of this directory to root." -+msgstr "" -+ -+#: ../tests/permissions.sh:84 -+#, sh-format -+msgid "" -+"Directory $dir has wrong permissions! The correct permissions should be " -+"$perm." -+msgstr "" -+ -+#: ../tests/permissions.sh:85 -+msgid "Please change the permissions to the recommended value." -+msgstr "" -+ -+#: ../tests/selftest.sh:37 -+msgid "Tests are not executed under root" -+msgstr "" -+ -+#: ../tests/selftest.sh:43 -+msgid "Variable \"VAR_NAMES\" is empty or not exported." -+msgstr "" -+ -+#: ../tests/selinux.sh:19 -+msgid "" -+"Using Enforing mode is highly recommended. See selinux manual page for " -+"switching to Enforcing mode." -+msgstr "" -+ -+#: ../tests/shadow.sh:70 -+#, sh-format -+msgid "$shadow: Line $i is empty" -+msgstr "" -+ -+#: ../tests/shadow.sh:79 -+#, sh-format -+msgid "$shadow: Line $i has wrong number of fields" -+msgstr "" -+ -+#: ../tests/shadow.sh:80 -+msgid "Please see 'man 5 shadow' and correct this line." -+msgstr "" -+ -+#: ../tests/shadow.sh:93 -+#, sh-format -+msgid "$shadow: Line $i: missing username!" -+msgstr "" -+ -+#: ../tests/shadow.sh:94 -+msgid "Check this line, fill in first item (username), or delete whole line." -+msgstr "" -+ -+#: ../tests/shadow.sh:101 -+#, sh-format -+msgid "" -+"$shadow: Line $i: User $username contains disallowed characters in his login." -+msgstr "" -+ -+#: ../tests/shadow.sh:111 -+#, sh-format -+msgid "$shadow: Line $i: User $username has too long username." -+msgstr "" -+ -+#: ../tests/shadow.sh:112 -+#, sh-format -+msgid "" -+"Check this line in $shadow and rename user's login to be shorter than " -+"$MaxLength characters" -+msgstr "" -+ -+#: ../tests/shadow.sh:118 -+#, sh-format -+msgid "$shadow: Line $i: User $username has no password!" -+msgstr "" -+ -+#: ../tests/shadow.sh:119 -+msgid "Run 'passwd' utility immediately to set his password!" -+msgstr "" -+ -+#: ../tests/tcp_wrappers.sh:63 -+msgid "" -+"Please consider restricting access to this service i.e. according to IP " -+"address ranges" -+msgstr "" -+ -+#: ../tests/xinetd.sh:66 ../tests/xinetd.sh:75 -+msgid "auth service IS ENABLED" -+msgstr "" -+ -+#: ../tests/xinetd.sh:84 -+msgid "systat service IS ENABLED" -+msgstr "" -+ -+#: ../tests/xinetd.sh:93 -+msgid "chargen service IS ENABLED" -+msgstr "" -+ -+#: ../tests/xinetd.sh:102 -+msgid "echo service IS ENABLED" -+msgstr "" -+ -+#: ../tests/xinetd.sh:111 -+msgid "finger service IS ENABLED" -+msgstr "" -+ -+#: ../tests/xinetd.sh:120 -+msgid "netstat service IS ENABLED" -+msgstr "" -+ -+#: ../tests/xinetd.sh:129 -+msgid "rusers service IS ENABLED" -+msgstr "" -+ -+#: ../src/filesystem.c:255 -+msgid "" -+"No local devices found. This is probably due to a misconfiguration. Check " -+"the FSTYPES variable in dsc file.\n" -+msgstr "" -+ -+#: ../src/filesystem.c:257 -+msgid "Please set the FSTYPES variable in dsc file.\n" -+msgstr "" -+ -+#: ../src/filesystem.c:289 -+msgid "block device" -+msgstr "périphérique bloc" -+ -+#: ../src/filesystem.c:290 -+msgid "character device" -+msgstr "périphérique caractère" -+ -+#: ../src/filesystem.c:291 -+msgid "directory" -+msgstr "répertoire" -+ -+#: ../src/filesystem.c:292 -+msgid "FIFO/pipe" -+msgstr "FIFO/pipe" -+ -+#: ../src/filesystem.c:293 -+msgid "symlink" -+msgstr "lien symbolique" -+ -+#: ../src/filesystem.c:294 -+msgid "regular file" -+msgstr "fichier régulier" -+ -+#: ../src/filesystem.c:295 -+msgid "socket" -+msgstr "socket" -+ -+#: ../src/filesystem.c:296 -+msgid "unknown" -+msgstr "inconnu" -+ -+#: ../src/filesystem.c:374 -+#, c-format -+msgid "Mislabeled %s '%s' found. Labeled as '%s', should be '%s'.\n" -+msgstr "" -+ -+#: ../src/filesystem.c:376 -+msgid "File is not labeled as defined in configuration. See man restorecon.\n" -+msgstr "" -+ -+#: ../src/filesystem.c:397 -+#, c-format -+msgid "User ID of %s \"%s\" doesn't exist in user database.\n" -+msgstr "" -+ -+#: ../src/filesystem.c:403 -+#, c-format -+msgid "Group ID of %s \"%s\" doesn't exist in group database.\n" -+msgstr "" -+ -+#: ../src/filesystem.c:412 -+#, c-format -+msgid "File \"%s\" is world writable.\n" -+msgstr "" -+ -+#: ../src/filesystem.c:418 -+#, c-format -+msgid "File \"%s\" is executable and world writable.\n" -+msgstr "" -+ -+#: ../src/filesystem.c:420 -+#, c-format -+msgid "File \"%s\" is executable and group writable.\n" -+msgstr "" -+ -+#: ../src/filesystem.c:434 -+#, c-format -+msgid "File \"%s\" is SUID script.\n" -+msgstr "" -+ -+#: ../src/filesystem.c:449 -+#, c-format -+msgid "The executable file \"%s\" doesn't belong to any package.\n" -+msgstr "" -+ -+#: ../src/filesystem.c:461 -+#, c-format -+msgid "Directory \"%s\" is world writable but the sticky bit is not set.\n" -+msgstr "" -+ -+#: ../src/filesystem.c:478 -+#, c-format -+msgid "Symbolic link \"%s\" points to a non-existent file \"%s\".\n" -+msgstr "" -+ -+#: ../src/filesystem.c:575 -+#, c-format -+msgid "rpmReadConfigFiles: Failed :[\n" -+msgstr "" -+ -+#: ../src/filesystem.c:576 -+msgid "RPMCHECK is enabled and RPM configuration loading failed.\n" -+msgstr "" -+ -+#: ../src/filesystem.c:588 -+msgid "" -+"SELINUXCHECK is enabled but filesystem test was not compiled with SELinux " -+"support.\n" -+msgstr "" -+ -+#: ../src/filesystem.c:645 -+msgid "Nothing to check, INCLUDE variable is empty.\n" -+msgstr "" -+ -+#: ../src/sectool.c:56 -+#, c-format -+msgid "Internal error: Unknown return code %d\n" -+msgstr "" -+ -+#: ../src/sectool.c:88 -+#, c-format -+msgid "Internal error: Unknown message type %d\n" -+msgstr "" -+ -diff --git a/src/actions.py b/src/actions.py -index 333c6d2..d4c4c50 100644 ---- a/src/actions.py -+++ b/src/actions.py -@@ -164,9 +164,8 @@ class ST_RunAction(ST_Action): - result = self._handle_missing_requirement(test.dsc["HEADER"]["NAME"], e) - - if result.result == scheduler.ST_TestResult.r_fatal: -- print >>self.stream, self.formatter.test_result_header(test.dsc['HEADER']['NAME'], raw=not self.stream.isatty()) -- print >>self.stream, self.formatter.output_one_result(result, self.options) -- raise tuierrors.SecToolActionError(self.name, _("Test %s failed in a fatal way - returned %d. Stopping execution of the rest of the tests" % (test.dsc['HEADER']['NAME'], result.return_code))) -+ print >>self.stream, _(" Test %s failed in a fatal way - returned %d. Stopping execution of the rest of the tests" % (test.dsc['HEADER']['NAME'], result.return_code)) -+ return result - - return result - -diff --git a/src/filesystem.c b/src/filesystem.c -index e6c69d3..93ad23a 100644 ---- a/src/filesystem.c -+++ b/src/filesystem.c -@@ -151,8 +151,8 @@ int matchsymwhite (const char *symlink, const char *target) { - register size_t i; - - for (i = 0; i < symwhite_arr_size; ++i) { -- if (fnmatch ( symwhite_arr[i], symlink, FNM_PATHNAME) == 0 && -- fnmatch (symwhite_tarr[i], target, FNM_PATHNAME) == 0) { -+ if (fnmatch ( symwhite_arr[i], symlink, 0) == 0 && -+ fnmatch (symwhite_tarr[i], target, 0) == 0) { - return 1; - } - } -@@ -341,7 +341,7 @@ int isexcluded (const char *path) { - int islocal (dev_t devid) { - register size_t l,r,d; - -- assert (DEVid_count > 1); -+ assert (DEVid_count > 0); - - l = 0; - r = DEVid_count - 1; -diff --git a/src/sectool.c b/src/sectool.c -index 542fa72..1e59793 100644 ---- a/src/sectool.c -+++ b/src/sectool.c -@@ -39,21 +39,27 @@ void init_env (struct envinit_t e[]) { - - void test_exit (int ret, const char *msg, ...) { - va_list list; -- -+ char *name = getenv ("NAME"); -+ -+ if (name == NULL) -+ name = "Unknown"; -+ - switch (ret) - { - case E_OK: -+ fprintf (stdout, "Test: %s, Succeeded\n", name); - exit (ret); -- -+ - case E_FAIL: - case E_FATAL: - va_start (list, msg); -- vfprintf (stderr, msg, list); -+ fprintf (stdout, "Test: %s, Error: %d, - ", name, ret); -+ vfprintf (stdout, msg, list); - va_end (list); - exit (ret); - - default: -- fprintf (stderr, _("Internal error: Unknown return code %d\n"), ret); -+ fprintf (stderr, _("Test: %s, Error: %d, - Internal error: Unknown return code %d\n"), name, E_FAIL, ret); - exit (E_FAIL); - } - } -diff --git a/tests/aliases.sh b/tests/aliases.sh -index b506475..4056030 100755 ---- a/tests/aliases.sh -+++ b/tests/aliases.sh -@@ -28,7 +28,7 @@ if (( ${REFRESH} == 1 )); then - fi - - # test all defined aliases --bash -l -c 'alias' | sed 's/^alias//' | -+bash -l -c 'alias' | grep '^alias ' | sed 's/^alias//' | - { - while read line - do -diff --git a/tests/firewall.sh b/tests/firewall.sh -index 9f0a0a0..38db109 100755 ---- a/tests/firewall.sh -+++ b/tests/firewall.sh -@@ -528,7 +528,7 @@ function check_chain () { - - if [[ -n "${LAST}" ]]; then - case "${LAST}" in -- REJECT) -+ REJECT|DROP) - return ${E_OK} - ;; - ACCEPT) diff --git a/sectool.spec b/sectool.spec index 15c6d8a..213b436 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,22 +1,17 @@ Summary: A security audit system and intrusion detection system Name: sectool -Version: 0.9.2 -Release: 5%{?dist} +Version: 0.9.3 +Release: 1%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: %{name}-%{version}.tar.bz2 Source1: sectool.log -Patch1: sectool-0.9.1-cronieReq.patch -Patch2: sectool-0.9.2-fixing.patch -#Patch2: sectool-0.9.1-setVar.patch -#Patch3: sectool-0.9.1-getValueFromH.patch -#Patch4: sectool-0.9.1-selinux.patch -#Patch5: sectool-0.9.1-zsh.patch -Patch6: sectool-0.9.2-optflags.patch +Patch1: sectool-0.9.2-optflags.patch License: GPLv2+ Group: Applications/System Requires: gettext coreutils libselinux Requires: python2 rpm-python libselinux-python glibc-headers -BuildRequires: desktop-file-utils gettext intltool rpm-devel asciidoc +BuildRequires: desktop-file-utils gettext intltool asciidoc +BuildRequires: rpm-devel >= 4.6.0 BuildRequires: libselinux-devel glibc-headers BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) @@ -40,13 +35,7 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %prep %setup -q -%patch1 -p1 -b .cronieReq -%patch2 -p1 -b .fixing -#%patch2 -p1 -b .setVar -#%patch3 -p1 -b .getValueFromH -#%patch4 -p1 -b .selinux -#%patch5 -p1 -b .zsh -%patch6 -p1 -b .optflags +%patch1 -p1 -b .optflags %build make %{?_smp_mflags} @@ -71,10 +60,6 @@ sed -i 's,__ico_path = \(.*\),__ico_path = "%{_datadir}/pixmaps/sectool/",' $RPM #this file is just for development rm $RPM_BUILD_ROOT/%{_datadir}/sectool/scheduler/selftest.py -# remove debug stuff -rm -f $RPM_BUILD_ROOT/%{_datadir}/sectool/tests/showvars.sh -rm -f $RPM_BUILD_ROOT/%{_sysconfdir}/sectool/tests/00_showvars.dsc - %find_lang %{name} %clean @@ -115,6 +100,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Wed Jun 03 2009 Peter Vrabec - 0.9.3-1 +- upgrade, bugfix release + * Thu May 21 2009 Ville Skyttä - 0.9.2-5 - Build with $RPM_OPT_FLAGS (#497231). diff --git a/sources b/sources index baef59f..11ac280 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -6d145a49ffbd0ce1876099208ec59bda sectool-0.9.2.tar.bz2 +c159880406a54463609f60a714db22a8 sectool-0.9.3.tar.bz2 From fb010ebbada5e4b74ab58d67e2a1ba074f6c0721 Mon Sep 17 00:00:00 2001 From: Peter Vrabec Date: Tue, 14 Jul 2009 13:26:02 +0000 Subject: [PATCH 04/33] handle ext4 fs in filesystem test (#510646) --- sectool-0.9.3-ext4.patch | 12 ++++++++++++ sectool.spec | 7 ++++++- 2 files changed, 18 insertions(+), 1 deletion(-) create mode 100644 sectool-0.9.3-ext4.patch diff --git a/sectool-0.9.3-ext4.patch b/sectool-0.9.3-ext4.patch new file mode 100644 index 0000000..b06d0b8 --- /dev/null +++ b/sectool-0.9.3-ext4.patch @@ -0,0 +1,12 @@ +diff -up sectool-0.9.3/tests/03_filesystem.dsc.ext4 sectool-0.9.3/tests/03_filesystem.dsc +--- sectool-0.9.3/tests/03_filesystem.dsc.ext4 2009-07-14 15:18:11.472860778 +0200 ++++ sectool-0.9.3/tests/03_filesystem.dsc 2009-07-14 15:18:32.558798787 +0200 +@@ -15,7 +15,7 @@ GROUPS="filesystem packages selinux" + AUTHOR="Dan Kopecek " + + [DEFAULT] +-FSTYPES="ext2 ext3 reiserfs xfs" ++FSTYPES="ext2 ext3 ext4 reiserfs xfs" + EXCLUDE="/var/lib/misc + /var/lib/mock" + INCLUDE="/bin diff --git a/sectool.spec b/sectool.spec index 213b436..9ab2f0a 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,11 +1,12 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.3 -Release: 1%{?dist} +Release: 2%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: %{name}-%{version}.tar.bz2 Source1: sectool.log Patch1: sectool-0.9.2-optflags.patch +Patch2: sectool-0.9.3-ext4.patch License: GPLv2+ Group: Applications/System Requires: gettext coreutils libselinux @@ -36,6 +37,7 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %prep %setup -q %patch1 -p1 -b .optflags +%patch2 -p1 -b .ext4 %build make %{?_smp_mflags} @@ -100,6 +102,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Tue Jul 14 2009 Peter Vrabec - 0.9.3-2 +- handle ext4 fs in filesystem test (#510646) + * Wed Jun 03 2009 Peter Vrabec - 0.9.3-1 - upgrade, bugfix release From c973a395a7ca29deffa4a86e0d3171e46a5ed4c3 Mon Sep 17 00:00:00 2001 From: Jesse Keating Date: Mon, 27 Jul 2009 04:07:18 +0000 Subject: [PATCH 05/33] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index 9ab2f0a..27244e7 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.3 -Release: 2%{?dist} +Release: 3%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: %{name}-%{version}.tar.bz2 Source1: sectool.log @@ -102,6 +102,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Sun Jul 26 2009 Fedora Release Engineering - 0.9.3-3 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild + * Tue Jul 14 2009 Peter Vrabec - 0.9.3-2 - handle ext4 fs in filesystem test (#510646) From 3b3755c32c4afb8c89b95383bdb7cc2ed808d859 Mon Sep 17 00:00:00 2001 From: Maros Barabas Date: Wed, 9 Sep 2009 14:10:16 +0000 Subject: [PATCH 06/33] - upgrade with PolicyKit integration - dbus update - fedora test day bugfixes --- .cvsignore | 2 +- sectool.spec | 33 ++++++++++++++++++++++++--------- sources | 2 +- 3 files changed, 26 insertions(+), 11 deletions(-) diff --git a/.cvsignore b/.cvsignore index 4bd8b9d..9462162 100644 --- a/.cvsignore +++ b/.cvsignore @@ -1 +1 @@ -sectool-0.9.3.tar.bz2 +sectool-0.9.4.tar.bz2 diff --git a/sectool.spec b/sectool.spec index 27244e7..1f88b50 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,21 +1,26 @@ Summary: A security audit system and intrusion detection system Name: sectool -Version: 0.9.3 -Release: 3%{?dist} +Version: 0.9.4 +Release: 1%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: %{name}-%{version}.tar.bz2 Source1: sectool.log Patch1: sectool-0.9.2-optflags.patch -Patch2: sectool-0.9.3-ext4.patch +#Patch2: sectool-0.9.3-ext4.patch License: GPLv2+ Group: Applications/System -Requires: gettext coreutils libselinux +Requires: gettext coreutils libselinux python-slip-dbus PolicyKit dbus Requires: python2 rpm-python libselinux-python glibc-headers BuildRequires: desktop-file-utils gettext intltool asciidoc BuildRequires: rpm-devel >= 4.6.0 BuildRequires: libselinux-devel glibc-headers BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) +# Temporarily disable check-buildroot +#%define __arch_install_post %{nil} +# Disable debuginfo building +%define debug_package %{nil} + %package gui Summary: GUI for sectool - security audit system and intrusion detection system License: GPLv2+ @@ -37,7 +42,7 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %prep %setup -q %patch1 -p1 -b .optflags -%patch2 -p1 -b .ext4 +#%patch2 -p1 -b .ext4 %build make %{?_smp_mflags} @@ -55,7 +60,7 @@ install -d -m 755 $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d install -p -m 644 %{SOURCE1} $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/sectool #adjust paths in sectool.conf sed -i 's,DSC_DIR=\(.*\),DSC_DIR=%{_sysconfdir}/sectool/tests,' $RPM_BUILD_ROOT%{_sysconfdir}/sectool/sectool.conf -sed -i 's,TESTS_DIRS=\(.*\),TESTS_DIRS=%{_datadir}/sectool/tests,' $RPM_BUILD_ROOT%{_sysconfdir}/sectool/sectool.conf +sed -i 's,TESTS_DIRS=\(.*\),TESTS_DIRS=%{_libexecdir}/sectool/tests,' $RPM_BUILD_ROOT%{_sysconfdir}/sectool/sectool.conf sed -i 's,TDATA_DIR_BASE=\(.*\),TDATA_DIR_BASE=%{_localstatedir}/lib/sectool,' $RPM_BUILD_ROOT%{_sysconfdir}/sectool/sectool.conf #adjust icons path in guiOutput.py sed -i 's,__ico_path = \(.*\),__ico_path = "%{_datadir}/pixmaps/sectool/",' $RPM_BUILD_ROOT%{_datadir}/sectool/guiOutput.py @@ -77,7 +82,7 @@ rm -rf $RPM_BUILD_ROOT %{_sbindir}/sectool #library with tests %{_datadir}/sectool/scheduler -%{_datadir}/sectool/tests +%{_libexecdir}/sectool/tests # command line tool %{_datadir}/sectool/actions.py* %{_datadir}/sectool/__init__.py* @@ -85,13 +90,18 @@ rm -rf $RPM_BUILD_ROOT %{_datadir}/sectool/mailoutput.py* %{_datadir}/sectool/sectool.py* %{_datadir}/sectool/tuierrors.py* +%{_libexecdir}/sectool-mechanism.py* +%{_datadir}/sectool/sectool-mechanism.py* %{_mandir}/man8/sectool.8.gz - +# PolicyKit +%{_sysconfdir}/dbus-1/system.d/org.fedoraproject.sectool.mechanism.conf +%{_datadir}/PolicyKit/policy/org.fedoraproject.sectool.policy +%{_datadir}/dbus-1/system-services/org.fedoraproject.sectool.mechanism.service %files gui %defattr(-,root,root) %config(noreplace) %{_sysconfdir}/pam.d/sectool-gui -%config(noreplace) %{_sysconfdir}/security/console.apps/sectool-gui +#%config(noreplace) %{_sysconfdir}/security/console.apps/sectool-gui %{_bindir}/sectool-gui %{_datadir}/sectool/gui*.py* %{_datadir}/sectool/sectool-gui.py* @@ -102,6 +112,11 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Wed Sep 09 2009 Maros Barabas - 0.9.4-2 +- upgrade with PolicyKit integration +- dbus update +- fedora test day bugfixes + * Sun Jul 26 2009 Fedora Release Engineering - 0.9.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild diff --git a/sources b/sources index 11ac280..469a20f 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -c159880406a54463609f60a714db22a8 sectool-0.9.3.tar.bz2 +fbd348268a8c5a5cf3004fb96a47e393 sectool-0.9.4.tar.bz2 From 0f0a2f6cec33e560288e07e78a85d5262c1f395e Mon Sep 17 00:00:00 2001 From: Maros Barabas Date: Thu, 19 Nov 2009 14:41:36 +0000 Subject: [PATCH 07/33] - change policy file path - removed usermod requirement --- sectool-0.9.4-pk1.patch | 21 +++++++++++++++++++++ sectool.spec | 14 +++++++++----- 2 files changed, 30 insertions(+), 5 deletions(-) create mode 100644 sectool-0.9.4-pk1.patch diff --git a/sectool-0.9.4-pk1.patch b/sectool-0.9.4-pk1.patch new file mode 100644 index 0000000..016efee --- /dev/null +++ b/sectool-0.9.4-pk1.patch @@ -0,0 +1,21 @@ +diff -up sectool-0.9.4/Makefile.old sectool-0.9.4/Makefile +--- sectool-0.9.4/Makefile.old 2009-11-19 13:36:45.680545213 +0100 ++++ sectool-0.9.4/Makefile 2009-11-19 13:37:05.108513565 +0100 +@@ -25,7 +25,7 @@ install: + mkdir -p $(DESTDIR)$(PKGDATADIR) + mkdir -p $(DESTDIR)$(PKGDATADIR)/scheduler + #mkdir -p $(DESTDIR)$(PKGDATADIR)/tests +- mkdir -p $(DESTDIR)$(DATADIR)/PolicyKit/policy/ ++ mkdir -p $(DESTDIR)$(DATADIR)/polkit-1/actions/ + mkdir -p $(DESTDIR)$(SYSCONFDIR)/dbus-1/system.d/ + mkdir -p $(DESTDIR)$(DATADIR)/dbus-1/system-services/ + mkdir -p $(DESTDIR)$(LIBEXECDIR)/sectool/tests +@@ -78,7 +78,7 @@ install: + done && test -z "$$fail" + chmod a+x $(DESTDIR)$(PKGDATADIR)/sectool-mechanism.py + # PolicyKit +- install -p -m644 org.fedoraproject.sectool.policy $(DESTDIR)$(DATADIR)/PolicyKit/policy/ ++ install -p -m644 org.fedoraproject.sectool.policy $(DESTDIR)$(DATADIR)/polkit-1/actions/ + install -p -m644 org.fedoraproject.sectool.mechanism.conf $(DESTDIR)$(SYSCONFDIR)/dbus-1/system.d/ + install -p -m644 org.fedoraproject.sectool.mechanism.service $(DESTDIR)$(DATADIR)/dbus-1/system-services/ + diff --git a/sectool.spec b/sectool.spec index 1f88b50..c3ed898 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,12 +1,12 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.4 -Release: 1%{?dist} +Release: 3%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: %{name}-%{version}.tar.bz2 Source1: sectool.log Patch1: sectool-0.9.2-optflags.patch -#Patch2: sectool-0.9.3-ext4.patch +Patch2: sectool-0.9.4-pk1.patch License: GPLv2+ Group: Applications/System Requires: gettext coreutils libselinux python-slip-dbus PolicyKit dbus @@ -26,7 +26,7 @@ Summary: GUI for sectool - security audit system and intrusion detection system License: GPLv2+ Group: Applications/System Requires: sectool = %{version}-%{release} -Requires: pygtk2 usermode +Requires: pygtk2 %description sectool is a security tool that can be used both as a security audit @@ -42,7 +42,7 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %prep %setup -q %patch1 -p1 -b .optflags -#%patch2 -p1 -b .ext4 +%patch2 -p1 -b .pk1 %build make %{?_smp_mflags} @@ -95,7 +95,7 @@ rm -rf $RPM_BUILD_ROOT %{_mandir}/man8/sectool.8.gz # PolicyKit %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.sectool.mechanism.conf -%{_datadir}/PolicyKit/policy/org.fedoraproject.sectool.policy +%{_datadir}/polkit-1/actions/org.fedoraproject.sectool.policy %{_datadir}/dbus-1/system-services/org.fedoraproject.sectool.mechanism.service %files gui @@ -112,6 +112,10 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Thu Nov 19 2009 Maros Barabas - 0.9.4-3 +- change policy file path +- removed usermod requirement + * Wed Sep 09 2009 Maros Barabas - 0.9.4-2 - upgrade with PolicyKit integration - dbus update From 76f5e4861aad283fdfc761a30905f6b7753cd912 Mon Sep 17 00:00:00 2001 From: Bill Nottingham Date: Wed, 25 Nov 2009 23:15:28 +0000 Subject: [PATCH 08/33] Fix typo that causes a failure to update the common directory. (releng #2781) --- Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Makefile b/Makefile index 460a38b..0ab0e08 100644 --- a/Makefile +++ b/Makefile @@ -1,10 +1,10 @@ # Makefile for source rpm: sectool -# $Id$ +# $Id: Makefile,v 1.1 2008/01/21 17:15:20 kevin Exp $ NAME := sectool SPECFILE = $(firstword $(wildcard *.spec)) define find-makefile-common -for d in common ../common ../../common ; do if [ -f $$d/Makefile.common ] ; then if [ -f $$d/CVS/Root -a -w $$/Makefile.common ] ; then cd $$d ; cvs -Q update ; fi ; echo "$$d/Makefile.common" ; break ; fi ; done +for d in common ../common ../../common ; do if [ -f $$d/Makefile.common ] ; then if [ -f $$d/CVS/Root -a -w $$d/Makefile.common ] ; then cd $$d ; cvs -Q update ; fi ; echo "$$d/Makefile.common" ; break ; fi ; done endef MAKEFILE_COMMON := $(shell $(find-makefile-common)) From 5a4b774ca49027c2daf13bbde72227dbfd3064f2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Mr=C3=A1z?= Date: Sat, 2 Jan 2010 20:46:55 +0000 Subject: [PATCH 09/33] - rebuilt with new librpm --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index c3ed898..ade5d8f 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.4 -Release: 3%{?dist} +Release: 4%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: %{name}-%{version}.tar.bz2 Source1: sectool.log @@ -112,6 +112,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Sat Jan 2 2010 Tomas Mraz - 0.9.4-4 +- rebuilt with new librpm + * Thu Nov 19 2009 Maros Barabas - 0.9.4-3 - change policy file path - removed usermod requirement From 0cb3edfcd2640ea69fc895906fd02dc0dd956838 Mon Sep 17 00:00:00 2001 From: Maros Barabas Date: Wed, 10 Mar 2010 15:43:52 +0000 Subject: [PATCH 10/33] Added patches for PolicyKit and dBus --- sectool-0.9.4-dbus-fix.patch | 156 ++++++++++++++++++++++++++++++ sectool-0.9.4-policykit-fix.patch | 84 ++++++++++++++++ sectool.spec | 9 +- 3 files changed, 248 insertions(+), 1 deletion(-) create mode 100644 sectool-0.9.4-dbus-fix.patch create mode 100644 sectool-0.9.4-policykit-fix.patch diff --git a/sectool-0.9.4-dbus-fix.patch b/sectool-0.9.4-dbus-fix.patch new file mode 100644 index 0000000..de4da67 --- /dev/null +++ b/sectool-0.9.4-dbus-fix.patch @@ -0,0 +1,156 @@ +diff -up sectool-0.9.4/org.fedoraproject.sectool.mechanism.conf.old sectool-0.9.4/org.fedoraproject.sectool.mechanism.conf +--- sectool-0.9.4/org.fedoraproject.sectool.mechanism.conf.old 2009-09-01 10:20:23.000000000 +0200 ++++ sectool-0.9.4/org.fedoraproject.sectool.mechanism.conf 2010-03-10 14:51:48.564326918 +0100 +@@ -9,7 +9,7 @@ + + + +- ++ + + + +diff -up sectool-0.9.4/org.fedoraproject.sectool.policy.old sectool-0.9.4/org.fedoraproject.sectool.policy +--- sectool-0.9.4/org.fedoraproject.sectool.policy.old 2009-08-24 16:43:10.000000000 +0200 ++++ sectool-0.9.4/org.fedoraproject.sectool.policy 2010-03-10 14:51:51.858326825 +0100 +@@ -20,8 +20,9 @@ + Run level + System policy prevents run level + +- no +- auth_admin ++ no ++ auth_admin_keep ++ auth_admin_keep + + + +@@ -29,9 +30,9 @@ + Run tests + System policy prevents run tests + +- no +- no +- auth_admin ++ auth_admin_keep ++ auth_admin_keep ++ auth_admin_keep + + + +diff -up sectool-0.9.4/src/sectool-gui.py.old sectool-0.9.4/src/sectool-gui.py +--- sectool-0.9.4/src/sectool-gui.py.old 2010-03-10 14:50:07.111201828 +0100 ++++ sectool-0.9.4/src/sectool-gui.py 2010-03-10 14:52:01.219201762 +0100 +@@ -712,10 +712,14 @@ class DBusCaller(object): + + def __init__(self): + ++ #print "DBusCaller::init::start" + self.timeout = -1 ++ self.auth = 0 ++ #print "DBusCaller::init::SystemBus()" + self.bus = dbus.SystemBus () + #self.bus_name = dbus.service.BusName('org.fedoraproject.sectool.mechanism', self.bus) +- self.dbus_action_object = self.bus.get_object ("org.fedoraproject.sectool.mechanism", "/org/fedoraproject/sectool/object") ++ #self.dbus_action_object = self.bus.get_object ("org.fedoraproject.sectool.mechanism", "/org/fedoraproject/sectool/object") ++ #print "DBusCaller::init::end" + + def get_action(self, action): + """ Get action from dbus sectool mechanism """ +@@ -723,7 +727,7 @@ class DBusCaller(object): + + @staticmethod + def error_handler(error): +- #print "ERROR: ", error ++ print "[ASYNC ERROR]: ", error + pass # We will recieve an error that timeout has expired + + @staticmethod +@@ -736,12 +740,16 @@ class DBusCaller(object): + + def close(self): + self.bus.flush() +- self.bus.close() ++ #self.bus.close() # can't close this, cause it will close main loop + + def run( self, args, file ): + +- auth = slip.dbus.polkit.IsSystemBusNameAuthorized( self.bus.get_unique_name(), "org.fedoraproject.sectool.runtests" ) ++ #print "DBusCaller::run::start" ++ #if (self.auth != 1): ++ self.auth = slip.dbus.polkit.IsSystemBusNameAuthorized( self.bus.get_unique_name(), "org.fedoraproject.sectool.runtests" ) ++ #print "DBusCaller::run::auth: \"",self.auth,"\" end" + self.runtests(args, file) ++ #print "DBusCaller::run::end" + + @slip.dbus.polkit.enable_proxy + def runtests( self, args, file ): +@@ -754,7 +762,7 @@ class DBusCaller(object): + [args, file], + reply_handler=self.reply_handler, + error_handler=self.error_handler, +- timeout=0.00) ++ timeout=10) + + + class ThreadHandler(threading.Thread, Handler): +@@ -845,6 +853,9 @@ class ThreadHandler(threading.Thread, Ha + """ + + self.readers = [] ++ # get action from dbus ++ #print "start dbus" ++ self.bus = DBusCaller() + for test in self.__suite: + + self.test = test +@@ -869,12 +880,10 @@ class ThreadHandler(threading.Thread, Ha + + # Block for dbus exceptions handling, here should be all code that manipulate with dBus + try: +- # get action from dbus +- bus = DBusCaller() +- + # Start new thread - reader to listen on socket and update GUI if something from dBus comes up + # We need to call reader here, because of passing bus to close connection and save processes +- reader = Reader( file, test.dsc['HEADER']['NAME'], self.fill_form, self.test_done, iter, bus ) ++ #print "start reader" ++ reader = Reader( file, test.dsc['HEADER']['NAME'], self.fill_form, self.test_done, iter, self.bus ) + reader.start() + # Add reader to readers pool + self.readers.append( reader ) +@@ -886,12 +895,15 @@ class ThreadHandler(threading.Thread, Ha + TODO: Look for async call, this is workaround using 0-timeout + If you use timeout=-1, it will be sequencial, all positives numbers are seconds in float + """ +- +- bus.run( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file ) ++ #print "run start" ++ self.bus.run( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file ) ++ #print "run end" + #bus.call( test.dsc["HEADER"]["NAME"], file ) + except dbus.DBusException, e: + # This should always happend. We need to be stopped by dBus to start new test in separate thread ++ raise e + if 'org.freedesktop.DBus.Error.NoReply' in e.get_dbus_name(): ++ print >>sys.stderr, "Not reply from DBus" + pass # maybe continue ? + # catch Authorization exception + elif 'NotAuthorizedException' in e.get_dbus_name(): +@@ -939,6 +951,7 @@ class ThreadHandler(threading.Thread, Ha + The testing process is going to die .. we have a little time to stop all tests correctly + """ + self.__stopthread.set( ) ++ self.bus.close() + for reader in self.readers: + reader.stop_thread() + +@@ -1056,7 +1069,7 @@ class Reader(threading.Thread): + def stop_thread(self): + + self.stop = True +- self.bus.close() ++ #self.bus.close() + + + diff --git a/sectool-0.9.4-policykit-fix.patch b/sectool-0.9.4-policykit-fix.patch new file mode 100644 index 0000000..5c46c4a --- /dev/null +++ b/sectool-0.9.4-policykit-fix.patch @@ -0,0 +1,84 @@ +diff -up sectool-0.9.4/src/sectool-gui.py.old sectool-0.9.4/src/sectool-gui.py +--- sectool-0.9.4/src/sectool-gui.py.old 2009-12-08 17:11:31.417357216 +0100 ++++ sectool-0.9.4/src/sectool-gui.py 2010-01-13 14:37:49.817461379 +0100 +@@ -645,7 +645,7 @@ class TestHandler( Handler ): + """ Stop button has been pressed """ + + self.threadHandler.stop() #: give a short amount of time to stop the test by itself +- self.__signalHandler.kill_thread() #: kill the test by unix-style kill through os library ++ #self.__signalHandler.kill_thread() #: kill the test by unix-style kill through os library + + def show_message_hint( self, test, msg_id ): + """ Show info message in hintWindow """ +@@ -721,6 +721,16 @@ class DBusCaller(object): + """ Get action from dbus sectool mechanism """ + return self.dbus_action_object.get_dbus_method( action, "org.fedoraproject.sectool.mechanism" ) + ++ @staticmethod ++ def error_handler(error): ++ #print "ERROR: ", error ++ pass # We will recieve an error that timeout has expired ++ ++ @staticmethod ++ def reply_handler(): ++ #print "REPLY done." ++ pass ++ + def call(self, *p, **k): + self.bus.call_async(*p, **k) + +@@ -728,13 +738,23 @@ class DBusCaller(object): + self.bus.flush() + self.bus.close() + ++ def run( self, args, file ): ++ ++ auth = slip.dbus.polkit.IsSystemBusNameAuthorized( self.bus.get_unique_name(), "org.fedoraproject.sectool.runtests" ) ++ self.runtests(args, file) ++ + @slip.dbus.polkit.enable_proxy + def runtests( self, args, file ): + +- auth = slip.dbus.polkit.IsSystemBusNameAuthorized( self.bus.get_unique_name(), "org.fedoraproject.sectool.runtests" ) +- if auth == "yes": self.timeout = 0.00 +- self.dbus_action_object.runtests( args, file, timeout=self.timeout, dbus_interface = "org.fedoraproject.sectool.mechanism" ) +- #dbus_action( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file, timeout=0.00 ) ++ self.bus.call_async("org.fedoraproject.sectool.mechanism", ++ "/org/fedoraproject/sectool/object", ++ "org.fedoraproject.sectool.mechanism", ++ "runtests", ++ "ass", ++ [args, file], ++ reply_handler=self.reply_handler, ++ error_handler=self.error_handler, ++ timeout=0.00) + + + class ThreadHandler(threading.Thread, Handler): +@@ -867,7 +887,7 @@ class ThreadHandler(threading.Thread, Ha + If you use timeout=-1, it will be sequencial, all positives numbers are seconds in float + """ + +- bus.runtests( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file ) ++ bus.run( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file ) + #bus.call( test.dsc["HEADER"]["NAME"], file ) + except dbus.DBusException, e: + # This should always happend. We need to be stopped by dBus to start new test in separate thread +@@ -889,8 +909,6 @@ class ThreadHandler(threading.Thread, Ha + + while self.done < count: + if self.__stopthread.isSet(): +- for reader in self.readers: +- reader.stop_thread() + #self.__formatter.stopProgressBar() + break + time.sleep(2) +@@ -921,6 +939,8 @@ class ThreadHandler(threading.Thread, Ha + The testing process is going to die .. we have a little time to stop all tests correctly + """ + self.__stopthread.set( ) ++ for reader in self.readers: ++ reader.stop_thread() + + def __make_tmp_file( self ): + """ diff --git a/sectool.spec b/sectool.spec index ade5d8f..4a40cb6 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,12 +1,14 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.4 -Release: 4%{?dist} +Release: 5%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: %{name}-%{version}.tar.bz2 Source1: sectool.log Patch1: sectool-0.9.2-optflags.patch Patch2: sectool-0.9.4-pk1.patch +Patch3: sectool-0.9.4-policykit-fix.patch +Patch4: sectool-0.9.4-dbus-fix.patch License: GPLv2+ Group: Applications/System Requires: gettext coreutils libselinux python-slip-dbus PolicyKit dbus @@ -43,6 +45,8 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %setup -q %patch1 -p1 -b .optflags %patch2 -p1 -b .pk1 +%patch3 -p1 -b .policykit +%patch4 -p1 -b .dbus %build make %{?_smp_mflags} @@ -112,6 +116,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Wed Mar 10 2010 Maros Barabas - 0.9.4-5 +- added patches for PolicyKit and dBus bugs + * Sat Jan 2 2010 Tomas Mraz - 0.9.4-4 - rebuilt with new librpm From 6f8e626dac688f9b3602fa01ad707c7a2bdbb65d Mon Sep 17 00:00:00 2001 From: Maros Barabas Date: Tue, 20 Apr 2010 12:28:33 +0000 Subject: [PATCH 11/33] Added -lrpmio (#564705) --- sectool-0.9.4-rpmio.patch | 12 ++++++++++++ sectool.spec | 7 ++++++- 2 files changed, 18 insertions(+), 1 deletion(-) create mode 100644 sectool-0.9.4-rpmio.patch diff --git a/sectool-0.9.4-rpmio.patch b/sectool-0.9.4-rpmio.patch new file mode 100644 index 0000000..a3a6c68 --- /dev/null +++ b/sectool-0.9.4-rpmio.patch @@ -0,0 +1,12 @@ +diff -up sectool-0.9.4/src/Makefile.rpmio sectool-0.9.4/src/Makefile +--- sectool-0.9.4/src/Makefile.rpmio 2010-04-19 12:01:28.502222085 +0200 ++++ sectool-0.9.4/src/Makefile 2010-04-19 12:01:35.076221727 +0200 +@@ -2,7 +2,7 @@ include ../sectool.mk + + CC= gcc + CFLAGS= -Wall -O2 -ffast-math $(RPM_OPT_FLAGS) -I. -D_FILE_OFFSET_BITS=64 -DTEST_SELINUX -I/usr/include/rpm +-LDFLAGS= -lrpm -lselinux ++LDFLAGS= -lrpm -lselinux -lrpmio + + SRCS_sectool=sectool.c + OBJS_sectool=$(SRCS_sectool:.c=.o) diff --git a/sectool.spec b/sectool.spec index 4a40cb6..00c1ba1 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.4 -Release: 5%{?dist} +Release: 6%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: %{name}-%{version}.tar.bz2 Source1: sectool.log @@ -9,6 +9,7 @@ Patch1: sectool-0.9.2-optflags.patch Patch2: sectool-0.9.4-pk1.patch Patch3: sectool-0.9.4-policykit-fix.patch Patch4: sectool-0.9.4-dbus-fix.patch +Patch5: sectool-0.9.4-rpmio.patch License: GPLv2+ Group: Applications/System Requires: gettext coreutils libselinux python-slip-dbus PolicyKit dbus @@ -47,6 +48,7 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %patch2 -p1 -b .pk1 %patch3 -p1 -b .policykit %patch4 -p1 -b .dbus +%patch5 -p1 -b .rpmio %build make %{?_smp_mflags} @@ -116,6 +118,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Mon Apr 19 2010 Maros Barabas - 0.9.4-6 +- Added -lrpmio (#564705) + * Wed Mar 10 2010 Maros Barabas - 0.9.4-5 - added patches for PolicyKit and dBus bugs From e217d61ba65cc7da9438405720ba4553e6098b91 Mon Sep 17 00:00:00 2001 From: Maros Barabas Date: Fri, 23 Apr 2010 14:00:52 +0000 Subject: [PATCH 12/33] Permissions test: changed permissions of directories in root --- sectool-0.9.4-permissions.patch | 38 +++++++++++++++++++++++++++++++++ sectool.spec | 7 +++++- 2 files changed, 44 insertions(+), 1 deletion(-) create mode 100644 sectool-0.9.4-permissions.patch diff --git a/sectool-0.9.4-permissions.patch b/sectool-0.9.4-permissions.patch new file mode 100644 index 0000000..c4b4423 --- /dev/null +++ b/sectool-0.9.4-permissions.patch @@ -0,0 +1,38 @@ +diff -up sectool-0.9.4/tests/permissions.sh.old sectool-0.9.4/tests/permissions.sh +--- sectool-0.9.4/tests/permissions.sh.old 2010-04-23 14:11:21.809668140 +0200 ++++ sectool-0.9.4/tests/permissions.sh 2010-04-23 14:09:11.761669009 +0200 +@@ -25,25 +25,25 @@ E_DOESNT_EXIST=1 + E_WRONG_OWNER=2 + E_WRONG_PERM=3 + +-dirs="/ 755 +-/bin 755 +-/boot 755 ++dirs="/ 555 ++/bin 555 ++/boot 555 + /dev 755 + /etc 755 + /home 755 +-/lib 755 ++/lib 555 + /media 755 + /mnt 755 + /opt 755 +-/root 750 +-/sbin 755 ++/root 550 ++/sbin 555 + /srv 755 + /tmp 1777 + /usr 755 +- /usr/bin 755 +- /usr/sbin 755 ++ /usr/bin 555 ++ /usr/sbin 555 + /usr/include 755 +- /usr/lib 755 ++ /usr/lib 555 + /usr/share 755 + /usr/src 755 + /usr/local 755 diff --git a/sectool.spec b/sectool.spec index 00c1ba1..d3ca7a7 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.4 -Release: 6%{?dist} +Release: 7%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: %{name}-%{version}.tar.bz2 Source1: sectool.log @@ -10,6 +10,7 @@ Patch2: sectool-0.9.4-pk1.patch Patch3: sectool-0.9.4-policykit-fix.patch Patch4: sectool-0.9.4-dbus-fix.patch Patch5: sectool-0.9.4-rpmio.patch +Patch6: sectool-0.9.4-permissions.patch License: GPLv2+ Group: Applications/System Requires: gettext coreutils libselinux python-slip-dbus PolicyKit dbus @@ -49,6 +50,7 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %patch3 -p1 -b .policykit %patch4 -p1 -b .dbus %patch5 -p1 -b .rpmio +%patch6 -p1 -b .perm %build make %{?_smp_mflags} @@ -118,6 +120,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Fri Apr 23 2010 Maros Barabas - 0.9.4-7 +- Permissions test: changed permissions of directories in root + * Mon Apr 19 2010 Maros Barabas - 0.9.4-6 - Added -lrpmio (#564705) From 9767469642880d68efdb426bdebe0860f9288283 Mon Sep 17 00:00:00 2001 From: Peter Vrabec Date: Thu, 27 May 2010 10:24:05 +0000 Subject: [PATCH 13/33] - filter (deleted) files in netserv - create empty log file after installation - fix expected permissions on shadow/gshadow --- sectool-0.9.4-deleted.patch | 15 +++++++++++++++ sectool-0.9.4-permissions.patch | 20 +++++++++++++++++--- sectool.spec | 23 +++++++++++++++++------ 3 files changed, 49 insertions(+), 9 deletions(-) create mode 100644 sectool-0.9.4-deleted.patch diff --git a/sectool-0.9.4-deleted.patch b/sectool-0.9.4-deleted.patch new file mode 100644 index 0000000..5258e56 --- /dev/null +++ b/sectool-0.9.4-deleted.patch @@ -0,0 +1,15 @@ +diff -up sectool-0.9.4/tests/netserv.sh.deleted sectool-0.9.4/tests/netserv.sh +--- sectool-0.9.4/tests/netserv.sh.deleted 2010-05-25 11:13:10.847410598 +0200 ++++ sectool-0.9.4/tests/netserv.sh 2010-05-25 11:14:25.615296772 +0200 +@@ -285,7 +285,10 @@ for p in ${PID[@]}; do + case "${FILE}" in + *.#prelink#.*) + FILE="`echo ${FILE} | sed -n 's|^\(.*\)\.#prelink#\..*$|\1|p'`" +- ;; ++ ;; ++ *\(deleted\)) ++ FILE="`echo ${FILE} | sed -n 's|^\(.*\)[[:space:]](deleted)$|\1|p'`" ++ ;; + esac + + case "`basename \"${FILE}\"`" in diff --git a/sectool-0.9.4-permissions.patch b/sectool-0.9.4-permissions.patch index c4b4423..9a7b31f 100644 --- a/sectool-0.9.4-permissions.patch +++ b/sectool-0.9.4-permissions.patch @@ -1,6 +1,6 @@ -diff -up sectool-0.9.4/tests/permissions.sh.old sectool-0.9.4/tests/permissions.sh ---- sectool-0.9.4/tests/permissions.sh.old 2010-04-23 14:11:21.809668140 +0200 -+++ sectool-0.9.4/tests/permissions.sh 2010-04-23 14:09:11.761669009 +0200 +diff -up sectool-0.9.4/tests/permissions.sh.perm sectool-0.9.4/tests/permissions.sh +--- sectool-0.9.4/tests/permissions.sh.perm 2009-08-24 15:34:48.000000000 +0200 ++++ sectool-0.9.4/tests/permissions.sh 2010-05-25 13:33:14.724541772 +0200 @@ -25,25 +25,25 @@ E_DOESNT_EXIST=1 E_WRONG_OWNER=2 E_WRONG_PERM=3 @@ -36,3 +36,17 @@ diff -up sectool-0.9.4/tests/permissions.sh.old sectool-0.9.4/tests/permissions. /usr/share 755 /usr/src 755 /usr/local 755 +diff -up sectool-0.9.4/tests/shadow.sh.perm sectool-0.9.4/tests/shadow.sh +--- sectool-0.9.4/tests/shadow.sh.perm 2010-05-25 13:35:48.966534888 +0200 ++++ sectool-0.9.4/tests/shadow.sh 2010-05-25 13:36:02.557293905 +0200 +@@ -54,8 +54,8 @@ then + fi + + # permissions on /etc/shadow and /etc/gshadow should be 400, should be owned by root:root +-check_file_perm $shadow 400 root:root 1 $E_BAD_PERMISSIONS_SHADOW "User shadow database" +-check_file_perm $group_shadow 400 root:root 1 $E_BAD_PERMISSIONS_SHADOW "Group shadow database" ++check_file_perm $shadow 000 root:root 1 $E_BAD_PERMISSIONS_SHADOW "User shadow database" ++check_file_perm $group_shadow 000 root:root 1 $E_BAD_PERMISSIONS_SHADOW "Group shadow database" + + + { diff --git a/sectool.spec b/sectool.spec index d3ca7a7..ff4bbed 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,9 +1,9 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.4 -Release: 7%{?dist} +Release: 8%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart -Source0: %{name}-%{version}.tar.bz2 +Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 Source1: sectool.log Patch1: sectool-0.9.2-optflags.patch Patch2: sectool-0.9.4-pk1.patch @@ -11,13 +11,14 @@ Patch3: sectool-0.9.4-policykit-fix.patch Patch4: sectool-0.9.4-dbus-fix.patch Patch5: sectool-0.9.4-rpmio.patch Patch6: sectool-0.9.4-permissions.patch +Patch7: sectool-0.9.4-deleted.patch License: GPLv2+ Group: Applications/System -Requires: gettext coreutils libselinux python-slip-dbus PolicyKit dbus -Requires: python2 rpm-python libselinux-python glibc-headers +Requires: gettext coreutils python-slip-dbus PolicyKit dbus +Requires: python2 rpm-python BuildRequires: desktop-file-utils gettext intltool asciidoc BuildRequires: rpm-devel >= 4.6.0 -BuildRequires: libselinux-devel glibc-headers +BuildRequires: libselinux-devel libselinux-python glibc-headers BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) # Temporarily disable check-buildroot @@ -51,6 +52,7 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %patch4 -p1 -b .dbus %patch5 -p1 -b .rpmio %patch6 -p1 -b .perm +%patch7 -p1 -b .deleted %build make %{?_smp_mflags} @@ -74,6 +76,8 @@ sed -i 's,TDATA_DIR_BASE=\(.*\),TDATA_DIR_BASE=%{_localstatedir}/lib/sectool,' $ sed -i 's,__ico_path = \(.*\),__ico_path = "%{_datadir}/pixmaps/sectool/",' $RPM_BUILD_ROOT%{_datadir}/sectool/guiOutput.py #this file is just for development rm $RPM_BUILD_ROOT/%{_datadir}/sectool/scheduler/selftest.py +mkdir -p $RPM_BUILD_ROOT/var/log/ +touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %find_lang %{name} @@ -101,8 +105,10 @@ rm -rf $RPM_BUILD_ROOT %{_libexecdir}/sectool-mechanism.py* %{_datadir}/sectool/sectool-mechanism.py* %{_mandir}/man8/sectool.8.gz +%{_localstatedir}/log/sectool.log + # PolicyKit -%{_sysconfdir}/dbus-1/system.d/org.fedoraproject.sectool.mechanism.conf +%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.sectool.mechanism.conf %{_datadir}/polkit-1/actions/org.fedoraproject.sectool.policy %{_datadir}/dbus-1/system-services/org.fedoraproject.sectool.mechanism.service @@ -120,6 +126,11 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Tue May 25 2010 Peter Vrabec - 0.9.4-8 +- filter (deleted) files in netserv +- create empty log file after installation +- fix expected permissions on shadow/gshadow + * Fri Apr 23 2010 Maros Barabas - 0.9.4-7 - Permissions test: changed permissions of directories in root From 705e0161c3633d50f5541935ae63fb0517676094 Mon Sep 17 00:00:00 2001 From: Peter Vrabec Date: Wed, 2 Jun 2010 11:55:35 +0000 Subject: [PATCH 14/33] skip a numeric check in debug mode --- sectool-0.9.4-numcheck.patch | 26 ++++++++++++++++++++++++++ sectool.spec | 7 ++++++- 2 files changed, 32 insertions(+), 1 deletion(-) create mode 100644 sectool-0.9.4-numcheck.patch diff --git a/sectool-0.9.4-numcheck.patch b/sectool-0.9.4-numcheck.patch new file mode 100644 index 0000000..46a041b --- /dev/null +++ b/sectool-0.9.4-numcheck.patch @@ -0,0 +1,26 @@ +diff -up sectool-0.9.4/tests/bash_defs_debug.sh.numcheck sectool-0.9.4/tests/bash_defs_debug.sh +--- sectool-0.9.4/tests/bash_defs_debug.sh.numcheck 2010-06-02 13:33:14.224631406 +0200 ++++ sectool-0.9.4/tests/bash_defs_debug.sh 2010-06-02 13:33:37.983572856 +0200 +@@ -232,14 +232,14 @@ function check_file_perm () { + + if [[ -z "$2" ]]; then + test_exit ${E_FAIL} "check_file_perm: missing argument \$2" +- else +- if [[ "$2" != "0" ]]; then +- l_int numtest=$2 +- +- if (( numtest == 0 )); then +- test_exit ${E_FAIL} "check_file_perm: expected numeric value in \$2" +- fi +- fi ++# else ++# if [[ "$2" != "0" ]]; then ++# l_int numtest=$2 ++# ++# if (( numtest == 0 )); then ++# test_exit ${E_FAIL} "check_file_perm: expected numeric value in \$2" ++# fi ++# fi + fi + + if [[ -z "$3" ]]; then diff --git a/sectool.spec b/sectool.spec index ff4bbed..df1df45 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.4 -Release: 8%{?dist} +Release: 9%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 Source1: sectool.log @@ -12,6 +12,7 @@ Patch4: sectool-0.9.4-dbus-fix.patch Patch5: sectool-0.9.4-rpmio.patch Patch6: sectool-0.9.4-permissions.patch Patch7: sectool-0.9.4-deleted.patch +Patch8: sectool-0.9.4-numcheck.patch License: GPLv2+ Group: Applications/System Requires: gettext coreutils python-slip-dbus PolicyKit dbus @@ -53,6 +54,7 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %patch5 -p1 -b .rpmio %patch6 -p1 -b .perm %patch7 -p1 -b .deleted +%patch8 -p1 -b .numcheck %build make %{?_smp_mflags} @@ -126,6 +128,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Wed Jun 02 2010 Peter Vrabec - 0.9.4-9 +- skip a numeric check in debug mode + * Tue May 25 2010 Peter Vrabec - 0.9.4-8 - filter (deleted) files in netserv - create empty log file after installation From 39db2db04c98e601410ea35991d938afeba61196 Mon Sep 17 00:00:00 2001 From: Peter Vrabec Date: Fri, 4 Jun 2010 12:53:40 +0000 Subject: [PATCH 15/33] upgrade --- .cvsignore | 2 +- sectool-0.9.3-ext4.patch | 12 -- sectool-0.9.4-dbus-fix.patch | 156 ------------------ sectool-0.9.4-deleted.patch | 15 -- sectool-0.9.4-numcheck.patch | 26 --- sectool-0.9.4-permissions.patch | 52 ------ sectool-0.9.4-pk1.patch | 21 --- sectool-0.9.4-policykit-fix.patch | 84 ---------- sectool-0.9.4-rpmio.patch | 12 -- ...lags.patch => sectool-0.9.5-optflags.patch | 8 +- sectool.spec | 27 +-- sources | 2 +- 12 files changed, 14 insertions(+), 403 deletions(-) delete mode 100644 sectool-0.9.3-ext4.patch delete mode 100644 sectool-0.9.4-dbus-fix.patch delete mode 100644 sectool-0.9.4-deleted.patch delete mode 100644 sectool-0.9.4-numcheck.patch delete mode 100644 sectool-0.9.4-permissions.patch delete mode 100644 sectool-0.9.4-pk1.patch delete mode 100644 sectool-0.9.4-policykit-fix.patch delete mode 100644 sectool-0.9.4-rpmio.patch rename sectool-0.9.2-optflags.patch => sectool-0.9.5-optflags.patch (53%) diff --git a/.cvsignore b/.cvsignore index 9462162..e8bbf4c 100644 --- a/.cvsignore +++ b/.cvsignore @@ -1 +1 @@ -sectool-0.9.4.tar.bz2 +sectool-0.9.5.tar.bz2 diff --git a/sectool-0.9.3-ext4.patch b/sectool-0.9.3-ext4.patch deleted file mode 100644 index b06d0b8..0000000 --- a/sectool-0.9.3-ext4.patch +++ /dev/null @@ -1,12 +0,0 @@ -diff -up sectool-0.9.3/tests/03_filesystem.dsc.ext4 sectool-0.9.3/tests/03_filesystem.dsc ---- sectool-0.9.3/tests/03_filesystem.dsc.ext4 2009-07-14 15:18:11.472860778 +0200 -+++ sectool-0.9.3/tests/03_filesystem.dsc 2009-07-14 15:18:32.558798787 +0200 -@@ -15,7 +15,7 @@ GROUPS="filesystem packages selinux" - AUTHOR="Dan Kopecek " - - [DEFAULT] --FSTYPES="ext2 ext3 reiserfs xfs" -+FSTYPES="ext2 ext3 ext4 reiserfs xfs" - EXCLUDE="/var/lib/misc - /var/lib/mock" - INCLUDE="/bin diff --git a/sectool-0.9.4-dbus-fix.patch b/sectool-0.9.4-dbus-fix.patch deleted file mode 100644 index de4da67..0000000 --- a/sectool-0.9.4-dbus-fix.patch +++ /dev/null @@ -1,156 +0,0 @@ -diff -up sectool-0.9.4/org.fedoraproject.sectool.mechanism.conf.old sectool-0.9.4/org.fedoraproject.sectool.mechanism.conf ---- sectool-0.9.4/org.fedoraproject.sectool.mechanism.conf.old 2009-09-01 10:20:23.000000000 +0200 -+++ sectool-0.9.4/org.fedoraproject.sectool.mechanism.conf 2010-03-10 14:51:48.564326918 +0100 -@@ -9,7 +9,7 @@ - - - -- -+ - - - -diff -up sectool-0.9.4/org.fedoraproject.sectool.policy.old sectool-0.9.4/org.fedoraproject.sectool.policy ---- sectool-0.9.4/org.fedoraproject.sectool.policy.old 2009-08-24 16:43:10.000000000 +0200 -+++ sectool-0.9.4/org.fedoraproject.sectool.policy 2010-03-10 14:51:51.858326825 +0100 -@@ -20,8 +20,9 @@ - Run level - System policy prevents run level - -- no -- auth_admin -+ no -+ auth_admin_keep -+ auth_admin_keep - - - -@@ -29,9 +30,9 @@ - Run tests - System policy prevents run tests - -- no -- no -- auth_admin -+ auth_admin_keep -+ auth_admin_keep -+ auth_admin_keep - - - -diff -up sectool-0.9.4/src/sectool-gui.py.old sectool-0.9.4/src/sectool-gui.py ---- sectool-0.9.4/src/sectool-gui.py.old 2010-03-10 14:50:07.111201828 +0100 -+++ sectool-0.9.4/src/sectool-gui.py 2010-03-10 14:52:01.219201762 +0100 -@@ -712,10 +712,14 @@ class DBusCaller(object): - - def __init__(self): - -+ #print "DBusCaller::init::start" - self.timeout = -1 -+ self.auth = 0 -+ #print "DBusCaller::init::SystemBus()" - self.bus = dbus.SystemBus () - #self.bus_name = dbus.service.BusName('org.fedoraproject.sectool.mechanism', self.bus) -- self.dbus_action_object = self.bus.get_object ("org.fedoraproject.sectool.mechanism", "/org/fedoraproject/sectool/object") -+ #self.dbus_action_object = self.bus.get_object ("org.fedoraproject.sectool.mechanism", "/org/fedoraproject/sectool/object") -+ #print "DBusCaller::init::end" - - def get_action(self, action): - """ Get action from dbus sectool mechanism """ -@@ -723,7 +727,7 @@ class DBusCaller(object): - - @staticmethod - def error_handler(error): -- #print "ERROR: ", error -+ print "[ASYNC ERROR]: ", error - pass # We will recieve an error that timeout has expired - - @staticmethod -@@ -736,12 +740,16 @@ class DBusCaller(object): - - def close(self): - self.bus.flush() -- self.bus.close() -+ #self.bus.close() # can't close this, cause it will close main loop - - def run( self, args, file ): - -- auth = slip.dbus.polkit.IsSystemBusNameAuthorized( self.bus.get_unique_name(), "org.fedoraproject.sectool.runtests" ) -+ #print "DBusCaller::run::start" -+ #if (self.auth != 1): -+ self.auth = slip.dbus.polkit.IsSystemBusNameAuthorized( self.bus.get_unique_name(), "org.fedoraproject.sectool.runtests" ) -+ #print "DBusCaller::run::auth: \"",self.auth,"\" end" - self.runtests(args, file) -+ #print "DBusCaller::run::end" - - @slip.dbus.polkit.enable_proxy - def runtests( self, args, file ): -@@ -754,7 +762,7 @@ class DBusCaller(object): - [args, file], - reply_handler=self.reply_handler, - error_handler=self.error_handler, -- timeout=0.00) -+ timeout=10) - - - class ThreadHandler(threading.Thread, Handler): -@@ -845,6 +853,9 @@ class ThreadHandler(threading.Thread, Ha - """ - - self.readers = [] -+ # get action from dbus -+ #print "start dbus" -+ self.bus = DBusCaller() - for test in self.__suite: - - self.test = test -@@ -869,12 +880,10 @@ class ThreadHandler(threading.Thread, Ha - - # Block for dbus exceptions handling, here should be all code that manipulate with dBus - try: -- # get action from dbus -- bus = DBusCaller() -- - # Start new thread - reader to listen on socket and update GUI if something from dBus comes up - # We need to call reader here, because of passing bus to close connection and save processes -- reader = Reader( file, test.dsc['HEADER']['NAME'], self.fill_form, self.test_done, iter, bus ) -+ #print "start reader" -+ reader = Reader( file, test.dsc['HEADER']['NAME'], self.fill_form, self.test_done, iter, self.bus ) - reader.start() - # Add reader to readers pool - self.readers.append( reader ) -@@ -886,12 +895,15 @@ class ThreadHandler(threading.Thread, Ha - TODO: Look for async call, this is workaround using 0-timeout - If you use timeout=-1, it will be sequencial, all positives numbers are seconds in float - """ -- -- bus.run( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file ) -+ #print "run start" -+ self.bus.run( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file ) -+ #print "run end" - #bus.call( test.dsc["HEADER"]["NAME"], file ) - except dbus.DBusException, e: - # This should always happend. We need to be stopped by dBus to start new test in separate thread -+ raise e - if 'org.freedesktop.DBus.Error.NoReply' in e.get_dbus_name(): -+ print >>sys.stderr, "Not reply from DBus" - pass # maybe continue ? - # catch Authorization exception - elif 'NotAuthorizedException' in e.get_dbus_name(): -@@ -939,6 +951,7 @@ class ThreadHandler(threading.Thread, Ha - The testing process is going to die .. we have a little time to stop all tests correctly - """ - self.__stopthread.set( ) -+ self.bus.close() - for reader in self.readers: - reader.stop_thread() - -@@ -1056,7 +1069,7 @@ class Reader(threading.Thread): - def stop_thread(self): - - self.stop = True -- self.bus.close() -+ #self.bus.close() - - - diff --git a/sectool-0.9.4-deleted.patch b/sectool-0.9.4-deleted.patch deleted file mode 100644 index 5258e56..0000000 --- a/sectool-0.9.4-deleted.patch +++ /dev/null @@ -1,15 +0,0 @@ -diff -up sectool-0.9.4/tests/netserv.sh.deleted sectool-0.9.4/tests/netserv.sh ---- sectool-0.9.4/tests/netserv.sh.deleted 2010-05-25 11:13:10.847410598 +0200 -+++ sectool-0.9.4/tests/netserv.sh 2010-05-25 11:14:25.615296772 +0200 -@@ -285,7 +285,10 @@ for p in ${PID[@]}; do - case "${FILE}" in - *.#prelink#.*) - FILE="`echo ${FILE} | sed -n 's|^\(.*\)\.#prelink#\..*$|\1|p'`" -- ;; -+ ;; -+ *\(deleted\)) -+ FILE="`echo ${FILE} | sed -n 's|^\(.*\)[[:space:]](deleted)$|\1|p'`" -+ ;; - esac - - case "`basename \"${FILE}\"`" in diff --git a/sectool-0.9.4-numcheck.patch b/sectool-0.9.4-numcheck.patch deleted file mode 100644 index 46a041b..0000000 --- a/sectool-0.9.4-numcheck.patch +++ /dev/null @@ -1,26 +0,0 @@ -diff -up sectool-0.9.4/tests/bash_defs_debug.sh.numcheck sectool-0.9.4/tests/bash_defs_debug.sh ---- sectool-0.9.4/tests/bash_defs_debug.sh.numcheck 2010-06-02 13:33:14.224631406 +0200 -+++ sectool-0.9.4/tests/bash_defs_debug.sh 2010-06-02 13:33:37.983572856 +0200 -@@ -232,14 +232,14 @@ function check_file_perm () { - - if [[ -z "$2" ]]; then - test_exit ${E_FAIL} "check_file_perm: missing argument \$2" -- else -- if [[ "$2" != "0" ]]; then -- l_int numtest=$2 -- -- if (( numtest == 0 )); then -- test_exit ${E_FAIL} "check_file_perm: expected numeric value in \$2" -- fi -- fi -+# else -+# if [[ "$2" != "0" ]]; then -+# l_int numtest=$2 -+# -+# if (( numtest == 0 )); then -+# test_exit ${E_FAIL} "check_file_perm: expected numeric value in \$2" -+# fi -+# fi - fi - - if [[ -z "$3" ]]; then diff --git a/sectool-0.9.4-permissions.patch b/sectool-0.9.4-permissions.patch deleted file mode 100644 index 9a7b31f..0000000 --- a/sectool-0.9.4-permissions.patch +++ /dev/null @@ -1,52 +0,0 @@ -diff -up sectool-0.9.4/tests/permissions.sh.perm sectool-0.9.4/tests/permissions.sh ---- sectool-0.9.4/tests/permissions.sh.perm 2009-08-24 15:34:48.000000000 +0200 -+++ sectool-0.9.4/tests/permissions.sh 2010-05-25 13:33:14.724541772 +0200 -@@ -25,25 +25,25 @@ E_DOESNT_EXIST=1 - E_WRONG_OWNER=2 - E_WRONG_PERM=3 - --dirs="/ 755 --/bin 755 --/boot 755 -+dirs="/ 555 -+/bin 555 -+/boot 555 - /dev 755 - /etc 755 - /home 755 --/lib 755 -+/lib 555 - /media 755 - /mnt 755 - /opt 755 --/root 750 --/sbin 755 -+/root 550 -+/sbin 555 - /srv 755 - /tmp 1777 - /usr 755 -- /usr/bin 755 -- /usr/sbin 755 -+ /usr/bin 555 -+ /usr/sbin 555 - /usr/include 755 -- /usr/lib 755 -+ /usr/lib 555 - /usr/share 755 - /usr/src 755 - /usr/local 755 -diff -up sectool-0.9.4/tests/shadow.sh.perm sectool-0.9.4/tests/shadow.sh ---- sectool-0.9.4/tests/shadow.sh.perm 2010-05-25 13:35:48.966534888 +0200 -+++ sectool-0.9.4/tests/shadow.sh 2010-05-25 13:36:02.557293905 +0200 -@@ -54,8 +54,8 @@ then - fi - - # permissions on /etc/shadow and /etc/gshadow should be 400, should be owned by root:root --check_file_perm $shadow 400 root:root 1 $E_BAD_PERMISSIONS_SHADOW "User shadow database" --check_file_perm $group_shadow 400 root:root 1 $E_BAD_PERMISSIONS_SHADOW "Group shadow database" -+check_file_perm $shadow 000 root:root 1 $E_BAD_PERMISSIONS_SHADOW "User shadow database" -+check_file_perm $group_shadow 000 root:root 1 $E_BAD_PERMISSIONS_SHADOW "Group shadow database" - - - { diff --git a/sectool-0.9.4-pk1.patch b/sectool-0.9.4-pk1.patch deleted file mode 100644 index 016efee..0000000 --- a/sectool-0.9.4-pk1.patch +++ /dev/null @@ -1,21 +0,0 @@ -diff -up sectool-0.9.4/Makefile.old sectool-0.9.4/Makefile ---- sectool-0.9.4/Makefile.old 2009-11-19 13:36:45.680545213 +0100 -+++ sectool-0.9.4/Makefile 2009-11-19 13:37:05.108513565 +0100 -@@ -25,7 +25,7 @@ install: - mkdir -p $(DESTDIR)$(PKGDATADIR) - mkdir -p $(DESTDIR)$(PKGDATADIR)/scheduler - #mkdir -p $(DESTDIR)$(PKGDATADIR)/tests -- mkdir -p $(DESTDIR)$(DATADIR)/PolicyKit/policy/ -+ mkdir -p $(DESTDIR)$(DATADIR)/polkit-1/actions/ - mkdir -p $(DESTDIR)$(SYSCONFDIR)/dbus-1/system.d/ - mkdir -p $(DESTDIR)$(DATADIR)/dbus-1/system-services/ - mkdir -p $(DESTDIR)$(LIBEXECDIR)/sectool/tests -@@ -78,7 +78,7 @@ install: - done && test -z "$$fail" - chmod a+x $(DESTDIR)$(PKGDATADIR)/sectool-mechanism.py - # PolicyKit -- install -p -m644 org.fedoraproject.sectool.policy $(DESTDIR)$(DATADIR)/PolicyKit/policy/ -+ install -p -m644 org.fedoraproject.sectool.policy $(DESTDIR)$(DATADIR)/polkit-1/actions/ - install -p -m644 org.fedoraproject.sectool.mechanism.conf $(DESTDIR)$(SYSCONFDIR)/dbus-1/system.d/ - install -p -m644 org.fedoraproject.sectool.mechanism.service $(DESTDIR)$(DATADIR)/dbus-1/system-services/ - diff --git a/sectool-0.9.4-policykit-fix.patch b/sectool-0.9.4-policykit-fix.patch deleted file mode 100644 index 5c46c4a..0000000 --- a/sectool-0.9.4-policykit-fix.patch +++ /dev/null @@ -1,84 +0,0 @@ -diff -up sectool-0.9.4/src/sectool-gui.py.old sectool-0.9.4/src/sectool-gui.py ---- sectool-0.9.4/src/sectool-gui.py.old 2009-12-08 17:11:31.417357216 +0100 -+++ sectool-0.9.4/src/sectool-gui.py 2010-01-13 14:37:49.817461379 +0100 -@@ -645,7 +645,7 @@ class TestHandler( Handler ): - """ Stop button has been pressed """ - - self.threadHandler.stop() #: give a short amount of time to stop the test by itself -- self.__signalHandler.kill_thread() #: kill the test by unix-style kill through os library -+ #self.__signalHandler.kill_thread() #: kill the test by unix-style kill through os library - - def show_message_hint( self, test, msg_id ): - """ Show info message in hintWindow """ -@@ -721,6 +721,16 @@ class DBusCaller(object): - """ Get action from dbus sectool mechanism """ - return self.dbus_action_object.get_dbus_method( action, "org.fedoraproject.sectool.mechanism" ) - -+ @staticmethod -+ def error_handler(error): -+ #print "ERROR: ", error -+ pass # We will recieve an error that timeout has expired -+ -+ @staticmethod -+ def reply_handler(): -+ #print "REPLY done." -+ pass -+ - def call(self, *p, **k): - self.bus.call_async(*p, **k) - -@@ -728,13 +738,23 @@ class DBusCaller(object): - self.bus.flush() - self.bus.close() - -+ def run( self, args, file ): -+ -+ auth = slip.dbus.polkit.IsSystemBusNameAuthorized( self.bus.get_unique_name(), "org.fedoraproject.sectool.runtests" ) -+ self.runtests(args, file) -+ - @slip.dbus.polkit.enable_proxy - def runtests( self, args, file ): - -- auth = slip.dbus.polkit.IsSystemBusNameAuthorized( self.bus.get_unique_name(), "org.fedoraproject.sectool.runtests" ) -- if auth == "yes": self.timeout = 0.00 -- self.dbus_action_object.runtests( args, file, timeout=self.timeout, dbus_interface = "org.fedoraproject.sectool.mechanism" ) -- #dbus_action( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file, timeout=0.00 ) -+ self.bus.call_async("org.fedoraproject.sectool.mechanism", -+ "/org/fedoraproject/sectool/object", -+ "org.fedoraproject.sectool.mechanism", -+ "runtests", -+ "ass", -+ [args, file], -+ reply_handler=self.reply_handler, -+ error_handler=self.error_handler, -+ timeout=0.00) - - - class ThreadHandler(threading.Thread, Handler): -@@ -867,7 +887,7 @@ class ThreadHandler(threading.Thread, Ha - If you use timeout=-1, it will be sequencial, all positives numbers are seconds in float - """ - -- bus.runtests( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file ) -+ bus.run( self.__make_dbus_call( test.dsc["HEADER"]["NAME"] ), file ) - #bus.call( test.dsc["HEADER"]["NAME"], file ) - except dbus.DBusException, e: - # This should always happend. We need to be stopped by dBus to start new test in separate thread -@@ -889,8 +909,6 @@ class ThreadHandler(threading.Thread, Ha - - while self.done < count: - if self.__stopthread.isSet(): -- for reader in self.readers: -- reader.stop_thread() - #self.__formatter.stopProgressBar() - break - time.sleep(2) -@@ -921,6 +939,8 @@ class ThreadHandler(threading.Thread, Ha - The testing process is going to die .. we have a little time to stop all tests correctly - """ - self.__stopthread.set( ) -+ for reader in self.readers: -+ reader.stop_thread() - - def __make_tmp_file( self ): - """ diff --git a/sectool-0.9.4-rpmio.patch b/sectool-0.9.4-rpmio.patch deleted file mode 100644 index a3a6c68..0000000 --- a/sectool-0.9.4-rpmio.patch +++ /dev/null @@ -1,12 +0,0 @@ -diff -up sectool-0.9.4/src/Makefile.rpmio sectool-0.9.4/src/Makefile ---- sectool-0.9.4/src/Makefile.rpmio 2010-04-19 12:01:28.502222085 +0200 -+++ sectool-0.9.4/src/Makefile 2010-04-19 12:01:35.076221727 +0200 -@@ -2,7 +2,7 @@ include ../sectool.mk - - CC= gcc - CFLAGS= -Wall -O2 -ffast-math $(RPM_OPT_FLAGS) -I. -D_FILE_OFFSET_BITS=64 -DTEST_SELINUX -I/usr/include/rpm --LDFLAGS= -lrpm -lselinux -+LDFLAGS= -lrpm -lselinux -lrpmio - - SRCS_sectool=sectool.c - OBJS_sectool=$(SRCS_sectool:.c=.o) diff --git a/sectool-0.9.2-optflags.patch b/sectool-0.9.5-optflags.patch similarity index 53% rename from sectool-0.9.2-optflags.patch rename to sectool-0.9.5-optflags.patch index 9779cf7..c47a3a9 100644 --- a/sectool-0.9.2-optflags.patch +++ b/sectool-0.9.5-optflags.patch @@ -1,12 +1,12 @@ -diff -up sectool-0.9.2/src/Makefile~ sectool-0.9.2/src/Makefile ---- sectool-0.9.2/src/Makefile~ 2008-11-13 11:08:40.000000000 +0200 -+++ sectool-0.9.2/src/Makefile 2009-04-23 00:19:30.000000000 +0300 +diff -up sectool-0.9.5/src/Makefile.optflags sectool-0.9.5/src/Makefile +--- sectool-0.9.5/src/Makefile.optflags 2010-06-04 11:35:47.000000000 +0200 ++++ sectool-0.9.5/src/Makefile 2010-06-04 11:51:19.428092050 +0200 @@ -1,7 +1,7 @@ include ../sectool.mk CC= gcc -CFLAGS= -Wall -O2 -ffast-math -I. -D_FILE_OFFSET_BITS=64 -DTEST_SELINUX -I/usr/include/rpm +CFLAGS= -Wall -O2 -ffast-math $(RPM_OPT_FLAGS) -I. -D_FILE_OFFSET_BITS=64 -DTEST_SELINUX -I/usr/include/rpm - LDFLAGS= -lrpm -lselinux + LDFLAGS= -lrpm -lselinux -lrpmio SRCS_sectool=sectool.c diff --git a/sectool.spec b/sectool.spec index df1df45..bf8de21 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,18 +1,11 @@ Summary: A security audit system and intrusion detection system Name: sectool -Version: 0.9.4 -Release: 9%{?dist} +Version: 0.9.5 +Release: 1%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 Source1: sectool.log -Patch1: sectool-0.9.2-optflags.patch -Patch2: sectool-0.9.4-pk1.patch -Patch3: sectool-0.9.4-policykit-fix.patch -Patch4: sectool-0.9.4-dbus-fix.patch -Patch5: sectool-0.9.4-rpmio.patch -Patch6: sectool-0.9.4-permissions.patch -Patch7: sectool-0.9.4-deleted.patch -Patch8: sectool-0.9.4-numcheck.patch +Patch1: sectool-0.9.5-optflags.patch License: GPLv2+ Group: Applications/System Requires: gettext coreutils python-slip-dbus PolicyKit dbus @@ -48,13 +41,6 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %prep %setup -q %patch1 -p1 -b .optflags -%patch2 -p1 -b .pk1 -%patch3 -p1 -b .policykit -%patch4 -p1 -b .dbus -%patch5 -p1 -b .rpmio -%patch6 -p1 -b .perm -%patch7 -p1 -b .deleted -%patch8 -p1 -b .numcheck %build make %{?_smp_mflags} @@ -128,10 +114,13 @@ rm -rf $RPM_BUILD_ROOT %changelog -* Wed Jun 02 2010 Peter Vrabec - 0.9.4-9 +* Fri Jun 04 2010 Peter Vrabec - 0.9.5-1 +- upgrade + +* Wed Jun 02 2010 Peter Vrabec - 0.9.4-9 - skip a numeric check in debug mode -* Tue May 25 2010 Peter Vrabec - 0.9.4-8 +* Tue May 25 2010 Peter Vrabec - 0.9.4-8 - filter (deleted) files in netserv - create empty log file after installation - fix expected permissions on shadow/gshadow diff --git a/sources b/sources index 469a20f..3c19455 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -fbd348268a8c5a5cf3004fb96a47e393 sectool-0.9.4.tar.bz2 +3f2496eaf10d690e899a0f8b3edb9853 sectool-0.9.5.tar.bz2 From 6ddc23b1231deb12e78c5840b8439498ae52ec30 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 29 Jul 2010 12:20:01 +0000 Subject: [PATCH 16/33] dist-git conversion --- .cvsignore => .gitignore | 0 Makefile | 21 --------------------- 2 files changed, 21 deletions(-) rename .cvsignore => .gitignore (100%) delete mode 100644 Makefile diff --git a/.cvsignore b/.gitignore similarity index 100% rename from .cvsignore rename to .gitignore diff --git a/Makefile b/Makefile deleted file mode 100644 index 0ab0e08..0000000 --- a/Makefile +++ /dev/null @@ -1,21 +0,0 @@ -# Makefile for source rpm: sectool -# $Id: Makefile,v 1.1 2008/01/21 17:15:20 kevin Exp $ -NAME := sectool -SPECFILE = $(firstword $(wildcard *.spec)) - -define find-makefile-common -for d in common ../common ../../common ; do if [ -f $$d/Makefile.common ] ; then if [ -f $$d/CVS/Root -a -w $$d/Makefile.common ] ; then cd $$d ; cvs -Q update ; fi ; echo "$$d/Makefile.common" ; break ; fi ; done -endef - -MAKEFILE_COMMON := $(shell $(find-makefile-common)) - -ifeq ($(MAKEFILE_COMMON),) -# attept a checkout -define checkout-makefile-common -test -f CVS/Root && { cvs -Q -d $$(cat CVS/Root) checkout common && echo "common/Makefile.common" ; } || { echo "ERROR: I can't figure out how to checkout the 'common' module." ; exit -1 ; } >&2 -endef - -MAKEFILE_COMMON := $(shell $(checkout-makefile-common)) -endif - -include $(MAKEFILE_COMMON) From f472186992d1b8e800e5f9022d5f73471355500d Mon Sep 17 00:00:00 2001 From: David Malcolm Date: Wed, 11 Aug 2010 18:00:36 -0400 Subject: [PATCH 17/33] recompiling .py files against Python 2.7 (rhbz#623358) --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index bf8de21..9a168f3 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 1%{?dist} +Release: 2%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 Source1: sectool.log @@ -114,6 +114,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Wed Aug 11 2010 David Malcolm - 0.9.5-2 +- recompiling .py files against Python 2.7 (rhbz#623358) + * Fri Jun 04 2010 Peter Vrabec - 0.9.5-1 - upgrade From a368be5c8fc88606b43ee8626964da2a0d65a815 Mon Sep 17 00:00:00 2001 From: Peter Vrabec Date: Thu, 20 Jan 2011 15:11:11 +0100 Subject: [PATCH 18/33] rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index 9a168f3..830cbed 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 2%{?dist} +Release: 3%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 Source1: sectool.log @@ -114,6 +114,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Thu Jan 20 2011 Peter Vrabec - 0.9.5-3 +- rebuild + * Wed Aug 11 2010 David Malcolm - 0.9.5-2 - recompiling .py files against Python 2.7 (rhbz#623358) From 292d2720f5e95fa22803f500dc7e28ab41d8cc24 Mon Sep 17 00:00:00 2001 From: Dennis Gilmore Date: Wed, 9 Feb 2011 07:01:56 -0600 Subject: [PATCH 19/33] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index 830cbed..ab14a37 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 3%{?dist} +Release: 4%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 Source1: sectool.log @@ -114,6 +114,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Wed Feb 09 2011 Fedora Release Engineering - 0.9.5-4 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild + * Thu Jan 20 2011 Peter Vrabec - 0.9.5-3 - rebuild From ceac501d29855d5ca2ab01c581348df48da8e80d Mon Sep 17 00:00:00 2001 From: Dennis Gilmore Date: Fri, 13 Jan 2012 21:44:09 -0600 Subject: [PATCH 20/33] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index ab14a37..1a1305a 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 4%{?dist} +Release: 5%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 Source1: sectool.log @@ -114,6 +114,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Sat Jan 14 2012 Fedora Release Engineering - 0.9.5-5 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild + * Wed Feb 09 2011 Fedora Release Engineering - 0.9.5-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild From a6a489926470a87efb415a8014da464aa30ca34e Mon Sep 17 00:00:00 2001 From: Peter Robinson Date: Sun, 4 Mar 2012 18:16:19 +0000 Subject: [PATCH 21/33] PolicyKit -> polkit since F-11 --- sectool.spec | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/sectool.spec b/sectool.spec index 1a1305a..34df4dc 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,19 +1,20 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 5%{?dist} +Release: 6%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart +License: GPLv2+ +Group: Applications/System + Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 Source1: sectool.log Patch1: sectool-0.9.5-optflags.patch -License: GPLv2+ -Group: Applications/System -Requires: gettext coreutils python-slip-dbus PolicyKit dbus + +Requires: gettext coreutils python-slip-dbus polkit dbus Requires: python2 rpm-python BuildRequires: desktop-file-utils gettext intltool asciidoc BuildRequires: rpm-devel >= 4.6.0 BuildRequires: libselinux-devel libselinux-python glibc-headers -BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) # Temporarily disable check-buildroot #%define __arch_install_post %{nil} @@ -46,7 +47,6 @@ sectool-gui provides a GTK-based graphical user interface to sectool. make %{?_smp_mflags} %install -rm -rf $RPM_BUILD_ROOT make DESTDIR=$RPM_BUILD_ROOT install desktop-file-install --delete-original \ --dir $RPM_BUILD_ROOT%{_datadir}/applications \ @@ -69,9 +69,6 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %find_lang %{name} -%clean -rm -rf $RPM_BUILD_ROOT - %files -f %{name}.lang %defattr(-,root,root) %doc COPYING AUTHORS README doc/tests_documentation.html @@ -95,7 +92,7 @@ rm -rf $RPM_BUILD_ROOT %{_mandir}/man8/sectool.8.gz %{_localstatedir}/log/sectool.log -# PolicyKit +# polkit %config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.sectool.mechanism.conf %{_datadir}/polkit-1/actions/org.fedoraproject.sectool.policy %{_datadir}/dbus-1/system-services/org.fedoraproject.sectool.mechanism.service @@ -114,6 +111,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Sun Mar 4 2012 Peter Robinson - 0.9.5-6 +- PolicyKit -> polkit since F-11 + * Sat Jan 14 2012 Fedora Release Engineering - 0.9.5-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild From 4859832281f0e08c6fbe48fc252c4199a0e9e322 Mon Sep 17 00:00:00 2001 From: Peter Vrabec Date: Tue, 3 Apr 2012 16:15:06 +0200 Subject: [PATCH 22/33] fixing dbus config privilege escalation (#809437) --- sectool-0.9.5-dbus.patch | 12 ++++++++++++ sectool.spec | 7 ++++++- 2 files changed, 18 insertions(+), 1 deletion(-) create mode 100644 sectool-0.9.5-dbus.patch diff --git a/sectool-0.9.5-dbus.patch b/sectool-0.9.5-dbus.patch new file mode 100644 index 0000000..aedb3ef --- /dev/null +++ b/sectool-0.9.5-dbus.patch @@ -0,0 +1,12 @@ +diff -up sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf.dbus sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf +--- sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf.dbus 2012-04-03 15:21:05.521186717 +0200 ++++ sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf 2012-04-03 15:23:57.602490428 +0200 +@@ -9,7 +9,6 @@ + + + +- +- ++ + + diff --git a/sectool.spec b/sectool.spec index 34df4dc..8740814 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 6%{?dist} +Release: 7%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart License: GPLv2+ Group: Applications/System @@ -9,6 +9,7 @@ Group: Applications/System Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 Source1: sectool.log Patch1: sectool-0.9.5-optflags.patch +Patch2: sectool-0.9.5-dbus.patch Requires: gettext coreutils python-slip-dbus polkit dbus Requires: python2 rpm-python @@ -42,6 +43,7 @@ sectool-gui provides a GTK-based graphical user interface to sectool. %prep %setup -q %patch1 -p1 -b .optflags +%patch2 -p1 -b .dbus %build make %{?_smp_mflags} @@ -111,6 +113,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Tue Apr 03 2012 Peter Vrabec - 0.9.5-7 +- fixing dbus config privilege escalation (#809437) + * Sun Mar 4 2012 Peter Robinson - 0.9.5-6 - PolicyKit -> polkit since F-11 From be59cae3036f40c3db6c3a4c1b804d8eae04462b Mon Sep 17 00:00:00 2001 From: Dennis Gilmore Date: Sat, 21 Jul 2012 14:17:01 -0500 Subject: [PATCH 23/33] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index 8740814..c1d60b5 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 7%{?dist} +Release: 8%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart License: GPLv2+ Group: Applications/System @@ -113,6 +113,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Sat Jul 21 2012 Fedora Release Engineering - 0.9.5-8 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild + * Tue Apr 03 2012 Peter Vrabec - 0.9.5-7 - fixing dbus config privilege escalation (#809437) From fb378303509e9a4cbf7dea2e739057715013de14 Mon Sep 17 00:00:00 2001 From: Dennis Gilmore Date: Thu, 14 Feb 2013 17:44:41 -0600 Subject: [PATCH 24/33] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index c1d60b5..1c48af0 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 8%{?dist} +Release: 9%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart License: GPLv2+ Group: Applications/System @@ -113,6 +113,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Thu Feb 14 2013 Fedora Release Engineering - 0.9.5-9 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild + * Sat Jul 21 2012 Fedora Release Engineering - 0.9.5-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild From b8e2d6f09f22f796984c2fc19c1e1683d6866983 Mon Sep 17 00:00:00 2001 From: Toshio Kuratomi Date: Mon, 25 Feb 2013 17:15:28 -0800 Subject: [PATCH 25/33] Remove vendor from desktop-file-install for F19+ https://fedorahosted.org/fesco/ticket/1077 --- sectool.spec | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index 1c48af0..3b4f128 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 9%{?dist} +Release: 10%{?dist} URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart License: GPLv2+ Group: Applications/System @@ -52,7 +52,9 @@ make %{?_smp_mflags} make DESTDIR=$RPM_BUILD_ROOT install desktop-file-install --delete-original \ --dir $RPM_BUILD_ROOT%{_datadir}/applications \ +%if 0%{?fedora} && 0%{?fedora} < 19 --vendor=fedora \ +%endif $RPM_BUILD_ROOT%{_datadir}/applications/sectool.desktop #logrotate @@ -108,11 +110,18 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %{_datadir}/sectool/sectool-gui.py* %{_datadir}/pixmaps/sectool-gui.png %{_datadir}/pixmaps/sectool-min.png +%if 0%{?fedora} && 0%{?fedora} < 19 %{_datadir}/applications/fedora-sectool.desktop +%else +%{_datadir}/applications/sectool.desktop +%endif %{_datadir}/pixmaps/sectool/*.png %changelog +* Mon Feb 25 2013 Toshio Kuratomi - 0.9.5-10 +- Remove vendor from desktop-file-install for F19+ https://fedorahosted.org/fesco/ticket/1077 + * Thu Feb 14 2013 Fedora Release Engineering - 0.9.5-9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild From 229b34069f5444a73838bae86b438322ff7887b4 Mon Sep 17 00:00:00 2001 From: Luke Macken Date: Thu, 9 May 2013 19:23:53 -0400 Subject: [PATCH 26/33] Fix the URL --- sectool.spec | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/sectool.spec b/sectool.spec index 3b4f128..7221c4c 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,8 +1,8 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 10%{?dist} -URL: https://hosted.fedoraproject.org/sectool/wiki/WikiStart +Release: 11%{?dist} +URL: https://fedorahosted.org/sectool License: GPLv2+ Group: Applications/System @@ -119,6 +119,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Thu May 09 2013 Luke Macken - 0.9.5-11 +- Fix the URL + * Mon Feb 25 2013 Toshio Kuratomi - 0.9.5-10 - Remove vendor from desktop-file-install for F19+ https://fedorahosted.org/fesco/ticket/1077 From 40e158d4f78949ae5ed88726ef147dbe7bcd8b5f Mon Sep 17 00:00:00 2001 From: Dennis Gilmore Date: Sun, 4 Aug 2013 09:04:49 -0500 Subject: [PATCH 27/33] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index 7221c4c..347dc21 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 11%{?dist} +Release: 12%{?dist} URL: https://fedorahosted.org/sectool License: GPLv2+ Group: Applications/System @@ -119,6 +119,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Sun Aug 04 2013 Fedora Release Engineering - 0.9.5-12 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild + * Thu May 09 2013 Luke Macken - 0.9.5-11 - Fix the URL From d1d1954478e0a0af3f97885b399016ffceeaa07a Mon Sep 17 00:00:00 2001 From: Dennis Gilmore Date: Sun, 8 Jun 2014 01:05:13 -0500 Subject: [PATCH 28/33] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index 347dc21..3cb6378 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 12%{?dist} +Release: 13%{?dist} URL: https://fedorahosted.org/sectool License: GPLv2+ Group: Applications/System @@ -119,6 +119,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Sun Jun 08 2014 Fedora Release Engineering - 0.9.5-13 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild + * Sun Aug 04 2013 Fedora Release Engineering - 0.9.5-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild From 2ce72a12d60787560ebc118dc99fec46b7d00613 Mon Sep 17 00:00:00 2001 From: Peter Robinson Date: Mon, 18 Aug 2014 01:56:15 +0000 Subject: [PATCH 29/33] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index 3cb6378..6922a7e 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 13%{?dist} +Release: 14%{?dist} URL: https://fedorahosted.org/sectool License: GPLv2+ Group: Applications/System @@ -119,6 +119,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Mon Aug 18 2014 Fedora Release Engineering - 0.9.5-14 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild + * Sun Jun 08 2014 Fedora Release Engineering - 0.9.5-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild From 4311a77181e39bc2d3a35d68b806cada77cec1d3 Mon Sep 17 00:00:00 2001 From: Dennis Gilmore Date: Fri, 19 Jun 2015 00:36:15 +0000 Subject: [PATCH 30/33] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index 6922a7e..a77c24d 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 14%{?dist} +Release: 15%{?dist} URL: https://fedorahosted.org/sectool License: GPLv2+ Group: Applications/System @@ -119,6 +119,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Fri Jun 19 2015 Fedora Release Engineering - 0.9.5-15 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild + * Mon Aug 18 2014 Fedora Release Engineering - 0.9.5-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild From 3743dd08a6f63d90d0c32071d48f08117199c434 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Zbigniew=20J=C4=99drzejewski-Szmek?= Date: Wed, 29 Jul 2015 09:52:49 -0400 Subject: [PATCH 31/33] Rebuild for rpm 4.12.90 --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index a77c24d..45dc526 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 15%{?dist} +Release: 16%{?dist} URL: https://fedorahosted.org/sectool License: GPLv2+ Group: Applications/System @@ -119,6 +119,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Wed Jul 29 2015 Zbigniew Jędrzejewski-Szmek - 0.9.5-16 +- Rebuilt for rpm 4.12.90 + * Fri Jun 19 2015 Fedora Release Engineering - 0.9.5-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild From d4ff109281579f07ad07ce8780ee8ef8de3391d8 Mon Sep 17 00:00:00 2001 From: Fedora Release Engineering Date: Thu, 4 Feb 2016 23:49:50 +0000 Subject: [PATCH 32/33] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild --- sectool.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sectool.spec b/sectool.spec index 45dc526..d674677 100644 --- a/sectool.spec +++ b/sectool.spec @@ -1,7 +1,7 @@ Summary: A security audit system and intrusion detection system Name: sectool Version: 0.9.5 -Release: 16%{?dist} +Release: 17%{?dist} URL: https://fedorahosted.org/sectool License: GPLv2+ Group: Applications/System @@ -119,6 +119,9 @@ touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log %changelog +* Thu Feb 04 2016 Fedora Release Engineering - 0.9.5-17 +- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild + * Wed Jul 29 2015 Zbigniew Jędrzejewski-Szmek - 0.9.5-16 - Rebuilt for rpm 4.12.90 From 8b3d8ab75be0c058f142d9b218126faf9059cf56 Mon Sep 17 00:00:00 2001 From: Daniel Kopecek Date: Mon, 13 Jun 2016 15:09:46 +0200 Subject: [PATCH 33/33] The sectool project is no longer developed nor maintained upstream. As a replacement, try the OpenSCAP project (https://www.open-scap.org) and its sectool SCL content (openscap-content-sectool package). --- .gitignore | 1 - dead.package | 1 + sectool-0.9.5-dbus.patch | 12 -- sectool-0.9.5-optflags.patch | 12 -- sectool.log | 7 - sectool.spec | 323 ----------------------------------- sources | 1 - 7 files changed, 1 insertion(+), 356 deletions(-) delete mode 100644 .gitignore create mode 100644 dead.package delete mode 100644 sectool-0.9.5-dbus.patch delete mode 100644 sectool-0.9.5-optflags.patch delete mode 100644 sectool.log delete mode 100644 sectool.spec delete mode 100644 sources diff --git a/.gitignore b/.gitignore deleted file mode 100644 index e8bbf4c..0000000 --- a/.gitignore +++ /dev/null @@ -1 +0,0 @@ -sectool-0.9.5.tar.bz2 diff --git a/dead.package b/dead.package new file mode 100644 index 0000000..0e76cf2 --- /dev/null +++ b/dead.package @@ -0,0 +1 @@ +The sectool project is no longer developed nor maintained upstream. As a replacement, try the OpenSCAP project (https://www.open-scap.org) and its sectool SCL content (openscap-content-sectool package). diff --git a/sectool-0.9.5-dbus.patch b/sectool-0.9.5-dbus.patch deleted file mode 100644 index aedb3ef..0000000 --- a/sectool-0.9.5-dbus.patch +++ /dev/null @@ -1,12 +0,0 @@ -diff -up sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf.dbus sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf ---- sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf.dbus 2012-04-03 15:21:05.521186717 +0200 -+++ sectool-0.9.5/org.fedoraproject.sectool.mechanism.conf 2012-04-03 15:23:57.602490428 +0200 -@@ -9,7 +9,6 @@ - - - -- -- -+ - - diff --git a/sectool-0.9.5-optflags.patch b/sectool-0.9.5-optflags.patch deleted file mode 100644 index c47a3a9..0000000 --- a/sectool-0.9.5-optflags.patch +++ /dev/null @@ -1,12 +0,0 @@ -diff -up sectool-0.9.5/src/Makefile.optflags sectool-0.9.5/src/Makefile ---- sectool-0.9.5/src/Makefile.optflags 2010-06-04 11:35:47.000000000 +0200 -+++ sectool-0.9.5/src/Makefile 2010-06-04 11:51:19.428092050 +0200 -@@ -1,7 +1,7 @@ - include ../sectool.mk - - CC= gcc --CFLAGS= -Wall -O2 -ffast-math -I. -D_FILE_OFFSET_BITS=64 -DTEST_SELINUX -I/usr/include/rpm -+CFLAGS= -Wall -O2 -ffast-math $(RPM_OPT_FLAGS) -I. -D_FILE_OFFSET_BITS=64 -DTEST_SELINUX -I/usr/include/rpm - LDFLAGS= -lrpm -lselinux -lrpmio - - SRCS_sectool=sectool.c diff --git a/sectool.log b/sectool.log deleted file mode 100644 index b8c5f70..0000000 --- a/sectool.log +++ /dev/null @@ -1,7 +0,0 @@ -/var/log/sectool.log { - missingok - notifempty - size 250k - create 0644 root root -} - diff --git a/sectool.spec b/sectool.spec deleted file mode 100644 index d674677..0000000 --- a/sectool.spec +++ /dev/null @@ -1,323 +0,0 @@ -Summary: A security audit system and intrusion detection system -Name: sectool -Version: 0.9.5 -Release: 17%{?dist} -URL: https://fedorahosted.org/sectool -License: GPLv2+ -Group: Applications/System - -Source0: https://fedorahosted.org/releases/s/e/sectool/%{name}-%{version}.tar.bz2 -Source1: sectool.log -Patch1: sectool-0.9.5-optflags.patch -Patch2: sectool-0.9.5-dbus.patch - -Requires: gettext coreutils python-slip-dbus polkit dbus -Requires: python2 rpm-python -BuildRequires: desktop-file-utils gettext intltool asciidoc -BuildRequires: rpm-devel >= 4.6.0 -BuildRequires: libselinux-devel libselinux-python glibc-headers - -# Temporarily disable check-buildroot -#%define __arch_install_post %{nil} -# Disable debuginfo building -%define debug_package %{nil} - -%package gui -Summary: GUI for sectool - security audit system and intrusion detection system -License: GPLv2+ -Group: Applications/System -Requires: sectool = %{version}-%{release} -Requires: pygtk2 - -%description -sectool is a security tool that can be used both as a security audit -and intrusion detection system. It consists of set of tests, library -and command line interface tool. Tests are sorted into groups and security -levels. Admins can run certain tests, groups or whole security levels. -The library and the tools are implemented in python and tests are -language independent. - -%description gui -sectool-gui provides a GTK-based graphical user interface to sectool. - -%prep -%setup -q -%patch1 -p1 -b .optflags -%patch2 -p1 -b .dbus - -%build -make %{?_smp_mflags} - -%install -make DESTDIR=$RPM_BUILD_ROOT install -desktop-file-install --delete-original \ - --dir $RPM_BUILD_ROOT%{_datadir}/applications \ -%if 0%{?fedora} && 0%{?fedora} < 19 - --vendor=fedora \ -%endif - $RPM_BUILD_ROOT%{_datadir}/applications/sectool.desktop - -#logrotate -install -d -m 755 $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d -install -p -m 644 %{SOURCE1} $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/sectool -#adjust paths in sectool.conf -sed -i 's,DSC_DIR=\(.*\),DSC_DIR=%{_sysconfdir}/sectool/tests,' $RPM_BUILD_ROOT%{_sysconfdir}/sectool/sectool.conf -sed -i 's,TESTS_DIRS=\(.*\),TESTS_DIRS=%{_libexecdir}/sectool/tests,' $RPM_BUILD_ROOT%{_sysconfdir}/sectool/sectool.conf -sed -i 's,TDATA_DIR_BASE=\(.*\),TDATA_DIR_BASE=%{_localstatedir}/lib/sectool,' $RPM_BUILD_ROOT%{_sysconfdir}/sectool/sectool.conf -#adjust icons path in guiOutput.py -sed -i 's,__ico_path = \(.*\),__ico_path = "%{_datadir}/pixmaps/sectool/",' $RPM_BUILD_ROOT%{_datadir}/sectool/guiOutput.py -#this file is just for development -rm $RPM_BUILD_ROOT/%{_datadir}/sectool/scheduler/selftest.py -mkdir -p $RPM_BUILD_ROOT/var/log/ -touch $RPM_BUILD_ROOT%{_localstatedir}/log/sectool.log - -%find_lang %{name} - -%files -f %{name}.lang -%defattr(-,root,root) -%doc COPYING AUTHORS README doc/tests_documentation.html -%config(noreplace) %{_sysconfdir}/sectool/ -%config(noreplace) %{_sysconfdir}/logrotate.d/sectool -%dir %{_localstatedir}/lib/sectool -%dir %{_datadir}/sectool -%{_sbindir}/sectool -#library with tests -%{_datadir}/sectool/scheduler -%{_libexecdir}/sectool/tests -# command line tool -%{_datadir}/sectool/actions.py* -%{_datadir}/sectool/__init__.py* -%{_datadir}/sectool/output.py* -%{_datadir}/sectool/mailoutput.py* -%{_datadir}/sectool/sectool.py* -%{_datadir}/sectool/tuierrors.py* -%{_libexecdir}/sectool-mechanism.py* -%{_datadir}/sectool/sectool-mechanism.py* -%{_mandir}/man8/sectool.8.gz -%{_localstatedir}/log/sectool.log - -# polkit -%config(noreplace) %{_sysconfdir}/dbus-1/system.d/org.fedoraproject.sectool.mechanism.conf -%{_datadir}/polkit-1/actions/org.fedoraproject.sectool.policy -%{_datadir}/dbus-1/system-services/org.fedoraproject.sectool.mechanism.service - -%files gui -%defattr(-,root,root) -%config(noreplace) %{_sysconfdir}/pam.d/sectool-gui -#%config(noreplace) %{_sysconfdir}/security/console.apps/sectool-gui -%{_bindir}/sectool-gui -%{_datadir}/sectool/gui*.py* -%{_datadir}/sectool/sectool-gui.py* -%{_datadir}/pixmaps/sectool-gui.png -%{_datadir}/pixmaps/sectool-min.png -%if 0%{?fedora} && 0%{?fedora} < 19 -%{_datadir}/applications/fedora-sectool.desktop -%else -%{_datadir}/applications/sectool.desktop -%endif -%{_datadir}/pixmaps/sectool/*.png - - -%changelog -* Thu Feb 04 2016 Fedora Release Engineering - 0.9.5-17 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - -* Wed Jul 29 2015 Zbigniew Jędrzejewski-Szmek - 0.9.5-16 -- Rebuilt for rpm 4.12.90 - -* Fri Jun 19 2015 Fedora Release Engineering - 0.9.5-15 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - -* Mon Aug 18 2014 Fedora Release Engineering - 0.9.5-14 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - -* Sun Jun 08 2014 Fedora Release Engineering - 0.9.5-13 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - -* Sun Aug 04 2013 Fedora Release Engineering - 0.9.5-12 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - -* Thu May 09 2013 Luke Macken - 0.9.5-11 -- Fix the URL - -* Mon Feb 25 2013 Toshio Kuratomi - 0.9.5-10 -- Remove vendor from desktop-file-install for F19+ https://fedorahosted.org/fesco/ticket/1077 - -* Thu Feb 14 2013 Fedora Release Engineering - 0.9.5-9 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild - -* Sat Jul 21 2012 Fedora Release Engineering - 0.9.5-8 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - -* Tue Apr 03 2012 Peter Vrabec - 0.9.5-7 -- fixing dbus config privilege escalation (#809437) - -* Sun Mar 4 2012 Peter Robinson - 0.9.5-6 -- PolicyKit -> polkit since F-11 - -* Sat Jan 14 2012 Fedora Release Engineering - 0.9.5-5 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - -* Wed Feb 09 2011 Fedora Release Engineering - 0.9.5-4 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - -* Thu Jan 20 2011 Peter Vrabec - 0.9.5-3 -- rebuild - -* Wed Aug 11 2010 David Malcolm - 0.9.5-2 -- recompiling .py files against Python 2.7 (rhbz#623358) - -* Fri Jun 04 2010 Peter Vrabec - 0.9.5-1 -- upgrade - -* Wed Jun 02 2010 Peter Vrabec - 0.9.4-9 -- skip a numeric check in debug mode - -* Tue May 25 2010 Peter Vrabec - 0.9.4-8 -- filter (deleted) files in netserv -- create empty log file after installation -- fix expected permissions on shadow/gshadow - -* Fri Apr 23 2010 Maros Barabas - 0.9.4-7 -- Permissions test: changed permissions of directories in root - -* Mon Apr 19 2010 Maros Barabas - 0.9.4-6 -- Added -lrpmio (#564705) - -* Wed Mar 10 2010 Maros Barabas - 0.9.4-5 -- added patches for PolicyKit and dBus bugs - -* Sat Jan 2 2010 Tomas Mraz - 0.9.4-4 -- rebuilt with new librpm - -* Thu Nov 19 2009 Maros Barabas - 0.9.4-3 -- change policy file path -- removed usermod requirement - -* Wed Sep 09 2009 Maros Barabas - 0.9.4-2 -- upgrade with PolicyKit integration -- dbus update -- fedora test day bugfixes - -* Sun Jul 26 2009 Fedora Release Engineering - 0.9.3-3 -- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild - -* Tue Jul 14 2009 Peter Vrabec - 0.9.3-2 -- handle ext4 fs in filesystem test (#510646) - -* Wed Jun 03 2009 Peter Vrabec - 0.9.3-1 -- upgrade, bugfix release - -* Thu May 21 2009 Ville Skyttä - 0.9.2-5 -- Build with $RPM_OPT_FLAGS (#497231). - -* Mon Jan 26 2009 Daniel Kopecek - 0.9.2-4 -- removed showvars.dsc - -* Fri Jan 23 2009 Daniel Kopecek - 0.9.2-3 -- removed showvars.sh -- added dist macro to Release: - -* Tue Dec 02 2008 Daniel Kopecek - 0.9.2-2 -- bugfix release - -* Mon Nov 24 2008 Daniel Kopecek - 0.9.2-1 -- upgrade, see changelog for changes - -* Mon Nov 03 2008 Peter Vrabec - 0.9.1-4 -- checking zsh home files (#469913) -- fix selinux test failure (#469910) - -* Mon Nov 03 2008 Peter Vrabec - 0.9.1-3 -- fix getValueFromH() (#469368) -- fix GUI: set REFRESH, DEBUG, LEVEL - -* Thu Oct 23 2008 Peter Vrabec - 0.9.1-2 -- add missing requirement (468033) -- fix deps of cron test (468033) - -* Wed Oct 22 2008 Peter Vrabec - 0.9.1-1 -- upgrade, bugfix release - -* Thu Oct 09 2008 Peter Vrabec - 0.9.0-1 -- upgrade, see changelog for changes - -* Sat Sep 06 2008 Peter Vrabec - 0.8.6-2 -- fix selinux DEPS, quick workaround - -* Fri Sep 05 2008 Peter Vrabec - 0.8.6-1 -- upgrade, see changelog - -* Thu Jul 03 2008 Peter Vrabec - 0.8.0-1 -- upgrade - -* Fri Jun 06 2008 Peter Vrabec - 0.7.6-1 -- upgrade - -* Mon May 26 2008 Peter Vrabec - 0.7.5-1 -- upgrade - -* Wed May 21 2008 Peter Vrabec - 0.7.4-1 -- new upstream release, lots of fixes and improvements, - see changelog - -* Mon Apr 28 2008 Peter Vrabec - 0.7.3-1 -- new upstream release -- better test integration - -* Fri Apr 25 2008 Peter Vrabec - 0.7.2-1 -- new upstream release -- Support overriding level configuration in ~/.sectoolrc -- Add saving level configuration in GUI: - -* Mon Apr 21 2008 Peter Vrabec - 0.7.1-1 -- new upstream release - -* Tue Apr 08 2008 Peter Vrabec - 0.7.0-1 -- new upstream release - -* Mon Mar 31 2008 Maros Barabas - 0.6.0-4 -- improved killing system in gui - -* Fri Mar 28 2008 Maros Barabas - 0.6.0-3 -- code review: cleaning code in OuputFormatter - adding comments - migrating public formatter methods to private - -* Tue Mar 25 2008 Maros Barabas - 0.6.0-2 -- repaired sensitivity of popup buttons -- code review: migrating public methods to private - more comments - -* Fri Mar 21 2008 Peter Vrabec - 0.6.0-1 -- gui improvements -- new feature include/exclude tests -- new sectool.conf - -* Mon Mar 18 2008 Jakub Hrozek - 0.5.1-1 -- Fix mail output - -* Wed Mar 05 2008 Peter Vrabec - 0.5.0-1 -- email sending support - -* Wed Mar 05 2008 Peter Vrabec - 0.4.0-1 -- new tests -- bugfixes -- support diff results -- improved GUI - -* Wed Jan 23 2008 Peter Vrabec - 0.2.0-1 -- stable demo release - -* Fri Jan 18 2008 Peter Vrabec - 0.1.0-4 -- fix rpmbuild on fc8 - -* Wed Jan 16 2008 Peter Vrabec - 0.1.0-3 -- fix license issues -- some macros clean up in makefile and spec - -* Wed Jan 16 2008 Peter Vrabec - 0.1.0-2 -- make rpmlint happy, very important cleanup - -* Tue Jan 15 2008 Peter Vrabec - 0.1.0-1 -- initial packaging diff --git a/sources b/sources deleted file mode 100644 index 3c19455..0000000 --- a/sources +++ /dev/null @@ -1 +0,0 @@ -3f2496eaf10d690e899a0f8b3edb9853 sectool-0.9.5.tar.bz2